IPAschema.xml

<Objs Version="1.1.0.1" xmlns="http://schemas.microsoft.com/powershell/2004/04">
  <Obj RefId="0">
    <TN RefId="0">
      <T>System.Management.Automation.PSCustomObject</T>
      <T>System.Object</T>
    </TN>
    <MS>
      <Obj N="radiusproxy_find" RefId="1">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for RADIUS proxy servers.</S>
          <Obj N="takes_options" RefId="2">
            <TN RefId="1">
              <T>System.Object[]</T>
              <T>System.Array</T>
              <T>System.Object</T>
            </TN>
            <LST>
              <Obj RefId="3">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy server name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this RADIUS proxy server</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The hostname or IP (with or without port)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiusserver</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Server</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">secret</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The secret used to encrypt data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiussecret</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Secret</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiustimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The total timeout across all retries (in seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="17">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retries</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="19">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Retries</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiusretries</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The number of times to retry authentication</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">10</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="20">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="21">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">userattr</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The username attribute on the user object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenusermapattribute</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="22">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="23">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User attribute</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="24">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="25">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="26">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="27">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="28">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="29">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="30">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="31">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="32">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="33">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="34">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="35">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="36">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="37">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="38">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="39">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="40">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="41">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="42">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="43">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="44">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="45">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="46">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="47">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="48">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="49">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="50">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">radiusproxy_find</S>
          <Obj N="takes_args" RefId="51">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="52">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="53">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="54">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_add_host" RefId="55">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add hosts that can manage this service.</S>
          <Obj N="takes_options" RefId="56">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="57">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="58">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="59">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="60">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="61">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="62">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="63">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="64">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="65">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="66">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="67">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="68">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="69">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="70">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="71">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="72">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="73">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="74">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="75">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="76">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="77">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="78">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="79">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="80">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="81">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_add_host</S>
          <Obj N="takes_args" RefId="82">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="83">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="84">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="85">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountkey_mod" RefId="86">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an automount key.</S>
          <Obj N="takes_options" RefId="87">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="88">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount key name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="89">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>req_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="90">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="91">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">info</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount information</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="92">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="93">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="94">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="95">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="96">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="97">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="98">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="99">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="101">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="102">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="111">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">newinfo</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">New mount information</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">newautomountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">New mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="114">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="115">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="116">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="117">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="119">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="120">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="121">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="122">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="125">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="126">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="127">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="128">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="130">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="131">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Rename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Rename the automount key object</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="133">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_output</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountkey_mod</S>
          <Obj N="takes_args" RefId="134">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="135">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="138">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountmap</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapautomountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="pwpolicy_mod" RefId="141">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a group password policy.</S>
          <Obj N="takes_options" RefId="142">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="143">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max lifetime (days)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbmaxpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum password lifetime (in days)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">20000</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="146">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="147">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min lifetime (hours)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbminpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum password lifetime (in hours)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="148">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="149">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">history</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="150">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">History size</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdhistorylength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Password history size</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="151">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="152">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minclasses</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Character classes</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmindiffchars</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum number of character classes</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">5</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="155">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlength</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min length</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdminlength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum length of password</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the policy (higher number means lower priority</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="161">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxfail</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max failures</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmaxfailure</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Consecutive failures before lockout</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="164">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">failinterval</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Failure reset interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdfailurecountinterval</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period after which failure count will be reset (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="167">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">lockouttime</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="168">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Lockout duration</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdlockoutduration</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period for which lockout is enforced (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="170">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="171">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="172">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="174">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="175">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="178">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="179">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="182">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="183">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="184">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="187">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="188">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="190">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="192">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="193">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="194">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="195">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="198">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="199">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="200">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="202">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pwpolicy_mod</S>
          <Obj N="takes_args" RefId="203">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="204">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage password policy for specific group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_user" RefId="207">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users and groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="208">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="209">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="210">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="211">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="214">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="215">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="216">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="217">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="219">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="221">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="223">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="224">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="225">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="226">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="227">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="231">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="232">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="234">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_user</S>
          <Obj N="takes_args" RefId="237">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="238">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="239">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_add" RefId="241">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new service delegation rule.</S>
          <Obj N="takes_options" RefId="242">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="243">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="244">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="247">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="248">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="251">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="252">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="254">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="256">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="257">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="258">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="260">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="262">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="263">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="266">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="267">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="268">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="272">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_add</S>
          <Obj N="takes_args" RefId="273">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="274">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_add_managedby" RefId="277">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add hosts that can manage this host.</S>
          <Obj N="takes_options" RefId="278">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="279">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="280">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="282">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="284">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="285">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="286">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="288">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="291">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="292">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="293">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="294">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="295">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="296">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="298">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="301">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_add_managedby</S>
          <Obj N="takes_args" RefId="304">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="305">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_add" RefId="308">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new HBAC rule.</S>
          <Obj N="takes_options" RefId="309">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="310">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <Obj N="exclude" RefId="311">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rule type</S>
                  <Obj N="values" RefId="312">
                    <TNRef RefId="1" />
                    <LST>
                      <S>allow</S>
                      <S>deny</S>
                    </LST>
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">accessruletype</S>
                  <S N="cli_metavar">['allow', 'deny']</S>
                  <S N="default">allow</S>
                  <S N="doc">Rule type (allow)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="315">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="317">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="318">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="319">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="321">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="323">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="324">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">srchostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">sourcehostcategory</S>
                  <S N="doc">Source host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Source host category</S>
                  <Obj N="values" RefId="325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="327">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="331">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="333">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="334">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="335">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="338">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="339">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="340">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="341">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="342">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="343">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="344">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="346">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="347">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="350">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="351">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="353">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="354">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="356">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="357">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="358">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="362">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="363">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="364">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="366">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="367">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="369">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_add</S>
          <Obj N="takes_args" RefId="372">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="373">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_del" RefId="376">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Delete an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="377">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="378">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="380">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="382">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="385">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_del</S>
          <Obj N="takes_args" RefId="386">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="387">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="388">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_rebuild" RefId="390">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Rebuild auto membership.</S>
          <Obj N="takes_options" RefId="391">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="392">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rebuild membership for all members of a grouping</S>
                  <Obj N="values" RefId="394">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="395">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="396">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rebuild membership for specified users</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">users</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Users</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="399">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rebuild membership for specified hosts</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hosts</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="400">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Hosts</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="402">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_wait</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="403">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">No wait</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_wait</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Don't wait for rebuilding membership</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="404">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="405">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="407">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="408">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="409">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="410">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="413">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="414">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="415">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="418">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="419">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="422">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_rebuild</S>
          <Obj N="takes_args" RefId="423">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_stage" RefId="424">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Move deleted user into staged area</S>
          <Obj N="takes_options" RefId="425">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="426">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="427">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="428">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="430">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="431">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="432">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_stage</S>
          <Obj N="takes_args" RefId="435">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="436">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_remove_member" RefId="439">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from an HBAC service group.</S>
          <Obj N="takes_options" RefId="440">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="441">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="442">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="443">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="446">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="447">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="448">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="449">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="451">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="453">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="456">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="457">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="458">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="461">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="463">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvc</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="465">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_remove_member</S>
          <Obj N="takes_args" RefId="466">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="467">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="468">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="469">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_find" RefId="470">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for hosts.</S>
          <Obj N="takes_options" RefId="471">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="472">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="475">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="478">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">locality</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host locality (e.g. "Baltimore, MD")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="480">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Locality</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="481">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host location (e.g. "Lab 2")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nshostlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="482">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="484">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">platform</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host hardware platform (e.g. "Lenovo T61")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nshardwareplatform</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="486">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Platform</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="487">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">os</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host operating system and version (e.g. "Fedora 9")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nsosversion</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Operating system</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="490">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Password used in bulk enrollment</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">userpassword</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="492">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User password</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="493">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded host certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="496">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">Must be of the form HH:HH:HH:HH:HH:HH, where each H is a hexadecimal character.</S>
                  <S N="cli_name">macaddress</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^([a-fA-F0-9]{2}[:|\-]?){5}[a-fA-F0-9]{2}$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MAC address</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">macaddress</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Hardware MAC address(es) on this host</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="499">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="502">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaassignedidview</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned ID View</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaassignedidview</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="503">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="504">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Assigned ID View</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="505">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="508">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="511">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="512">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="514">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="515">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="521">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="525">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="526">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="527">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="530">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="531">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="536">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="537">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("hostname")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="538">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="541">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for hosts with these member of host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="544">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for hosts without these member of host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="547">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for hosts with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="548">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="549">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="550">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for hosts without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="553">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts with these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="556">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts without these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="559">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts with these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="562">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts without these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="564">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="565">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts with these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="568">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts without these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="570">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="571">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">enroll_by_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">enroll_by_user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="572">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for hosts with these enrolled by users.</S>
                  <Obj N="flags" RefId="573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="574">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">not_enroll_by_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_enroll_by_user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="575">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for hosts without these enrolled by users.</S>
                  <Obj N="flags" RefId="576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="577">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">man_by_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts with these managed by hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">man_by_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="578">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="580">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_man_by_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts without these managed by hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_man_by_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="581">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="582">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="583">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">man_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts with these managing hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">man_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="586">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_man_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for hosts without these managing hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_man_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_find</S>
          <Obj N="takes_args" RefId="589">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="590">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_show" RefId="593">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Display a single ACI given an ACI name._x000A_ </S>
          <Obj N="takes_options" RefId="594">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="595">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="596">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="598">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="599">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="600">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">location</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Location of the ACI</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">location</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Location of the ACI</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="602">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="603">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="604">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="605">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="606">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="608">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="609">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="612">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="614">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="615">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="616">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="617">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_show</S>
          <Obj N="takes_args" RefId="618">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="619">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="621">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_remove_profile" RefId="622">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove profiles from a CA ACL.</S>
          <Obj N="takes_options" RefId="623">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="624">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="625">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="626">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="627">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="630">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="631">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="633">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="636">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="639">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="640">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="641">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="642">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="643">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="644">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="645">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="646">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">certprofiles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Certificate Profiles to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certprofile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member Certificate Profile</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_remove_profile</S>
          <Obj N="takes_args" RefId="649">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="650">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="651">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_mod" RefId="653">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Modify a trust (for future use)._x000A__x000A_ Currently only the default option to modify the LDAP attributes is_x000A_ available. More specific options will be added in coming releases._x000A_ </S>
          <Obj N="takes_options" RefId="654">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="655">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid_blacklist_incoming</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SID blacklist incoming</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantsidblacklistincoming</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SID blacklist incoming</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="658">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid_blacklist_outgoing</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SID blacklist outgoing</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantsidblacklistoutgoing</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="660">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SID blacklist outgoing</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="661">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">upn_suffixes</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">UPN suffixes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantadditionalsuffixes</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">UPN suffixes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="664">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="668">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="669">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="672">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="676">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="677">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="678">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="681">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="682">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="684">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="687">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="688">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="691">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="692">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="693">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_mod</S>
          <Obj N="takes_args" RefId="697">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="698">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="700">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_show" RefId="701">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an OTP token.</S>
          <Obj N="takes_options" RefId="702">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="704">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="708">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="709">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="714">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="715">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="717">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="722">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="724">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="725">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="727">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_show</S>
          <Obj N="takes_args" RefId="730">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="731">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_add" RefId="734">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new host.</S>
          <Obj N="takes_options" RefId="735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="736">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="739">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">locality</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host locality (e.g. "Baltimore, MD")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="741">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Locality</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="742">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host location (e.g. "Lab 2")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nshostlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="745">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">platform</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host hardware platform (e.g. "Lenovo T61")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nshardwareplatform</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Platform</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="748">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">os</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host operating system and version (e.g. "Fedora 9")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsosversion</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Operating system</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="751">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Password used in bulk enrollment</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userpassword</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User password</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="755">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random password to be used in bulk enrollment</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="759">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded host certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="761">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="762">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">Must be of the form HH:HH:HH:HH:HH:HH, where each H is a hexadecimal character.</S>
                  <S N="cli_name">macaddress</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^([a-fA-F0-9]{2}[:|\-]?){5}[a-fA-F0-9]{2}$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MAC address</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">macaddress</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Hardware MAC address(es) on this host</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="764">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="765">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="768">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="769">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="770">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="771">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaassignedidview</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned ID View</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaassignedidview</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Assigned ID View</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="774">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="776">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="777">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">requires_pre_auth</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="778">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Requires pre-authentication</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbrequirespreauth</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Pre-authentication is required for the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="781">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="782">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="783">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted for delegation</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbokasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Client credentials may be delegated to the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="784">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="786">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="787">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_to_auth_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="788">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted to authenticate as user</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrboktoauthasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">The service is allowed to authenticate on behalf of a client</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="792">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="793">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="796">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="797">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="798">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="799">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="800">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="801">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">force host name even if not in DNS</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="802">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="805">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_reverse</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="806">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_reverse&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_reverse</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">skip reverse DNS detection</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="810">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ip_address</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Add the host to DNS with this IP address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ip_address</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">IP Address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="819">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="820">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="824">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="825">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="830">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="832">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="834">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_add</S>
          <Obj N="takes_args" RefId="835">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="836">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountkey_find" RefId="839">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an automount key.</S>
          <Obj N="takes_options" RefId="840">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="841">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount key name.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>req_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="844">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">info</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount information</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="847">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="850">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="853">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="854">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="856">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="858">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="859">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="860">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="861">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="864">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="865">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="866">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountkey_find</S>
          <Obj N="takes_args" RefId="869">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="870">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="871">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="873">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountmap</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapautomountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="876">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_remove_sourcehost" RefId="879">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="880">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="881">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="882">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="883">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="887">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="888">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="890">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="893">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="894">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="895">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="897">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="898">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="899">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="900">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="902">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="903">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="906">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_remove_sourcehost</S>
          <Obj N="takes_args" RefId="909">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="910">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_add" RefId="913">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a CA.</S>
          <Obj N="takes_options" RefId="914">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="915">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description of the purpose of the CA</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="918">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject Distinguished Name</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacasubjectdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="921">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">chain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="930">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;chain&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">chain</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include certificate chain in output</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="931">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="934">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="935">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="937">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="938">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="939">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="940">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="941">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="942">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="944">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="945">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="946">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_add</S>
          <Obj N="takes_args" RefId="950">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="951">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="953">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_enable" RefId="954">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable DNS Forward Zone.</S>
          <Obj N="takes_options" RefId="955">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="956">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_enable</S>
          <Obj N="takes_args" RefId="960">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="961">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="pwpolicy_find" RefId="964">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for group password policies.</S>
          <Obj N="takes_options" RefId="965">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="966">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage password policy for specific group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="967">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="969">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max lifetime (days)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbmaxpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum password lifetime (in days)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">20000</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="971">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="972">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min lifetime (hours)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbminpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum password lifetime (in hours)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="974">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="975">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">history</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">History size</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdhistorylength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Password history size</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="978">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minclasses</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Character classes</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmindiffchars</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum number of character classes</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">5</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlength</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min length</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdminlength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum length of password</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="984">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the policy (higher number means lower priority</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="987">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxfail</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max failures</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmaxfailure</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Consecutive failures before lockout</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="990">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">failinterval</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="991">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Failure reset interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdfailurecountinterval</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period after which failure count will be reset (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="992">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="993">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">lockouttime</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="994">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Lockout duration</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdlockoutduration</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period for which lockout is enforced (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="996">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="997">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="998">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="999">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1001">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1002">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1003">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1005">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1006">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1007">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1008">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1009">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1010">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1011">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1014">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1017">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1018">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1019">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("group")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pwpolicy_find</S>
          <Obj N="takes_args" RefId="1023">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1024">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1026">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_del" RefId="1027">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an HBAC service group.</S>
          <Obj N="takes_options" RefId="1028">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1029">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1030">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1033">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1035">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1036">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1037">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_del</S>
          <Obj N="takes_args" RefId="1038">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1039">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_remove_member" RefId="1042">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from a hostgroup.</S>
          <Obj N="takes_options" RefId="1043">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1044">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1045">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1047">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1050">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1051">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1059">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1060">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1061">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1062">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1063">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1064">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1066">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1068">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1069">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1071">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_remove_member</S>
          <Obj N="takes_args" RefId="1072">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1073">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1075">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_add" RefId="1076">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="1077">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1078">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1081">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">maprule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to map the certificate with a user entry</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapmaprule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1082">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1083">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mapping rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1084">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">matchrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to check if a certificate can be used for authentication</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapmatchrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Matching rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1087">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">domain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Domain name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">associateddomain</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Domain where the user entry will be searched</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1090">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1091">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertmappriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the rule (higher number means lower priority</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1093">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1094">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1095">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1097">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1098">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1101">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1102">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1112">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1113">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1114">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1115">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1117">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1118">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1119">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1121">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_add</S>
          <Obj N="takes_args" RefId="1122">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1123">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1125">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_apply" RefId="1126">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Applies ID View to specified hosts or current members of specified hostgroups. If any other ID View is applied to the host, it is overridden.</S>
          <Obj N="takes_options" RefId="1127">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1128">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hosts to apply the ID View to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">hosts</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1131">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hostgroups to whose hosts apply the ID View to. Please note that view is not applied automatically to any hosts added to the hostgroup after running the idview-apply command.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">hostgroups</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1134">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_apply</S>
          <Obj N="takes_args" RefId="1138">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1139">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1141">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_mod" RefId="1142">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Modify ACI._x000A_ </S>
          <Obj N="takes_options" RefId="1143">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1144">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permission</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permission ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1145">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1147">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1148">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1150">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant(read, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1151">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1153">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1154">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes to which the permission applies</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1156">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['user', 'group', 'host', 'service', 'hostgroup', 'netgroup', 'dnsrecord']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">type of IPA object (user, group, host, hostgroup, service, netgroup)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Type</S>
                  <Obj N="values" RefId="1158">
                    <TNRef RefId="1" />
                    <LST>
                      <S>user</S>
                      <S>group</S>
                      <S>host</S>
                      <S>service</S>
                      <S>hostgroup</S>
                      <S>netgroup</S>
                      <S>dnsrecord</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="1159">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1160">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Member of a group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1161">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member of</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1163">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Legal LDAP filter (e.g. ou=Engineering)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1166">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1167">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1168">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1169">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1170">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1172">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">self</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1173">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Target your own entry (self)</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">selfaci</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Apply ACI to your own entry (self)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1177">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="1179">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="1180">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1181">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1182">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1183">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1184">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1186">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1187">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1188">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1190">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1192">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1193">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1194">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_mod</S>
          <Obj N="takes_args" RefId="1197">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1198">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dns_update_system_records" RefId="1201">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Update location and IPA server DNS records</S>
          <Obj N="takes_options" RefId="1202">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1203">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dry_run</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1204">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Dry run</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">dry_run</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Do not update records only return expected records</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1205">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1208">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1209">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1210">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1211">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1214">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1215">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1217">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1220">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dns_update_system_records</S>
          <Obj N="takes_args" RefId="1224">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_disable" RefId="1225">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable a user account.</S>
          <Obj N="takes_options" RefId="1226">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1227">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_disable</S>
          <Obj N="takes_args" RefId="1231">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1232">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="1234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_mod" RefId="1235">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify information about a host.</S>
          <Obj N="takes_options" RefId="1236">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1237">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1239">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1240">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">locality</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host locality (e.g. "Baltimore, MD")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1241">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Locality</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1243">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host location (e.g. "Lab 2")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nshostlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1246">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">platform</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host hardware platform (e.g. "Lenovo T61")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nshardwareplatform</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Platform</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1249">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">os</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host operating system and version (e.g. "Fedora 9")</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsosversion</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Operating system</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1252">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Password used in bulk enrollment</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userpassword</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1253">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User password</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1255">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1256">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random password to be used in bulk enrollment</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1257">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1260">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded host certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1262">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1263">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbprincipalname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1265">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1266">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">Must be of the form HH:HH:HH:HH:HH:HH, where each H is a hexadecimal character.</S>
                  <S N="cli_name">macaddress</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^([a-fA-F0-9]{2}[:|\-]?){5}[a-fA-F0-9]{2}$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MAC address</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">macaddress</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Hardware MAC address(es) on this host</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1267">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1268">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1269">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1272">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1273">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1275">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaassignedidview</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned ID View</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaassignedidview</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1276">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Assigned ID View</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1278">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1281">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">requires_pre_auth</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="1282">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Requires pre-authentication</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbrequirespreauth</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Pre-authentication is required for the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1283">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1286">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="1287">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted for delegation</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbokasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Client credentials may be delegated to the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1288">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1291">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_to_auth_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="1292">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted to authenticate as user</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrboktoauthasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">The service is allowed to authenticate on behalf of a client</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1295">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1296">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1300">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1301">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1304">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1305">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1308">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1309">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1311">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1312">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1313">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">updatedns</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1314">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;updatedns&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">updatedns</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Update DNS entries</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1315">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1318">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1319">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1321">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1324">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1325">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1327">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1330">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1334">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1335">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1337">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_mod</S>
          <Obj N="takes_args" RefId="1340">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1341">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_remove_cert" RefId="1344">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove one or more certificates to the stageuser entry</S>
          <Obj N="takes_options" RefId="1345">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1346">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1347">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1348">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1349">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1350">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1351">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1352">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1353">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1358">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1362">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1363">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1364">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1368">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1369">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_remove_cert</S>
          <Obj N="takes_args" RefId="1371">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1372">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="1374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_show" RefId="1375">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a hostgroup.</S>
          <Obj N="takes_options" RefId="1376">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1377">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1378">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1379">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1380">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1382">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1383">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1384">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1385">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1388">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1389">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1390">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1394">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1395">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1398">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1399">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1400">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1401">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_show</S>
          <Obj N="takes_args" RefId="1404">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1405">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_del" RefId="1408">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a segment.</S>
          <Obj N="takes_options" RefId="1409">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1410">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1411">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1415">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1418">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_del</S>
          <Obj N="takes_args" RefId="1419">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1420">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1422">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1423">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_del" RefId="1426">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a CA.</S>
          <Obj N="takes_options" RefId="1427">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1428">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1429">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1430">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1431">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1433">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_del</S>
          <Obj N="takes_args" RefId="1437">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1438">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_remove_certmapdata" RefId="1441">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove one or more certificate mappings from the stage user entry.</S>
          <Obj N="takes_options" RefId="1442">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1443">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1444">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuer</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1445">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1446">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1447">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subject</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1448">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1449">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1452">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1453">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1455">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1456">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1458">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1459">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1464">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1467">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1468">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1469">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1470">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1472">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_remove_certmapdata</S>
          <Obj N="takes_args" RefId="1474">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1475">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="1477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="1478">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">certmapdata</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate mapping data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapdata</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1480">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate mapping data</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_archive_internal" RefId="1481">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="1482">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1483">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1484">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1486">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1487">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1490">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1491">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1492">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1494">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">session_key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Session key wrapped with transport certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">session_key</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1496">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;session_key&gt;</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1497">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">vault_data</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault data encrypted with session key</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">vault_data</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1499">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;vault_data&gt;</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1500">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">nonce</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Nonce</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nonce</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;nonce&gt;</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1503">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1504">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1505">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1508">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1509">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1510">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1511">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1513">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1515">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1517">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_archive_internal</S>
          <Obj N="takes_args" RefId="1519">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1520">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="1522">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="plugins" RefId="1523">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show all loaded plugins.</S>
          <Obj N="takes_options" RefId="1524">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1525">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">server</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1526">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;server&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">server</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Forward to server instead of running locally</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1527">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1529">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1530">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1531">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1536">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1537">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1538">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1539">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">plugins</S>
          <Obj N="takes_args" RefId="1540">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="radiusproxy_del" RefId="1541">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a RADIUS proxy server.</S>
          <Obj N="takes_options" RefId="1542">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1543">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1544">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1548">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">radiusproxy_del</S>
          <Obj N="takes_args" RefId="1552">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1553">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">RADIUS proxy server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_mod" RefId="1556">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Modify an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="1557">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1558">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1561">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1564">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1569">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1572">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1573">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1574">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1575">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1578">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="1579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="1580">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="1581">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1582">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1583">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1585">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1587">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1588">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1589">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1591">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1593">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1594">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1596">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_mod</S>
          <Obj N="takes_args" RefId="1598">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1599">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="class_show" RefId="1602">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a class.</S>
          <Obj N="takes_options" RefId="1603">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1604">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1605">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1609">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1610">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1611">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1615">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1616">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1617">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1619">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">class_show</S>
          <Obj N="takes_args" RefId="1620">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1621">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">full_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">full_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1622">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_host" RefId="1624">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add hosts and hostgroups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="1625">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1626">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1627">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1631">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1632">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1633">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1636">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1638">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1639">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1641">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1642">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1643">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1645">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1646">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1648">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1650">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1651">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1654">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostmask</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">host masks of allowed hosts</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostmask</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1655">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1656">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host masks of allowed hosts</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_host</S>
          <Obj N="takes_args" RefId="1657">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1658">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1660">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_fetch_domains" RefId="1661">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Refresh list of the domains associated with the trust</S>
          <Obj N="takes_options" RefId="1662">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1663">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1664">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1668">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain controller for the Active Directory domain (optional)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">realm_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain controller for the Active Directory domain (optional)</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1671">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1672">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1674">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1676">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1677">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1678">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1679">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1680">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1683">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1684">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_fetch_domains</S>
          <Obj N="takes_args" RefId="1687">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1688">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_mod" RefId="1691">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an HBAC service group.</S>
          <Obj N="takes_options" RefId="1692">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1693">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1694">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1696">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1697">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1698">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1700">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1704">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1708">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1709">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1713">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1714">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1715">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1718">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1719">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1720">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1723">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1724">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1725">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1729">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1730">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1731">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1734">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_mod</S>
          <Obj N="takes_args" RefId="1735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1736">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_unapply" RefId="1739">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Clears ID View from specified hosts or current members of specified hostgroups.</S>
          <Obj N="takes_options" RefId="1740">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1741">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hosts to clear (any) ID View from.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">hosts</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1744">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hostgroups whose hosts should have ID Views cleared. Note that view is not cleared automatically from any host added to the hostgroup after running idview-unapply command.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1745">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">hostgroups</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1747">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1748">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1750">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_unapply</S>
          <Obj N="takes_args" RefId="1751">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_add_privilege" RefId="1752">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add privileges to a role.</S>
          <Obj N="takes_options" RefId="1753">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1755">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1760">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1761">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1762">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1764">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1765">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1766">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1767">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1768">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1770">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1771">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1774">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1775">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1776">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">privileges</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">privileges</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">privilege</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1777">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1778">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">privilege</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_add_privilege</S>
          <Obj N="takes_args" RefId="1779">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1780">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_find" RefId="1783">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for privileges.</S>
          <Obj N="takes_options" RefId="1784">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1785">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1787">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1788">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1791">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1792">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1793">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1794">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1796">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1797">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1798">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1799">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1802">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1803">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1804">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1805">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1808">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1809">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1810">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1812">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1819">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1820">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_find</S>
          <Obj N="takes_args" RefId="1824">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1825">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmapconfig_show" RefId="1828">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show the current Certificate Identity Mapping configuration.</S>
          <Obj N="takes_options" RefId="1829">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1830">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1831">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1832">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1835">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1836">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1838">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1840">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1841">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1842">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1843">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1846">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1847">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1848">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmapconfig_show</S>
          <Obj N="takes_args" RefId="1851">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_disable" RefId="1852">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable DNS Forward Zone.</S>
          <Obj N="takes_options" RefId="1853">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1854">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1857">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_disable</S>
          <Obj N="takes_args" RefId="1858">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1859">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1861">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_find" RefId="1862">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for Certificate Identity Mapping Rules.</S>
          <Obj N="takes_options" RefId="1863">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1864">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1867">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1870">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">maprule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to map the certificate with a user entry</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipacertmapmaprule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1871">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mapping rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1873">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">matchrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to check if a certificate can be used for authentication</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipacertmapmatchrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Matching rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1876">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">domain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Domain name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">associateddomain</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Domain where the user entry will be searched</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1880">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertmappriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the rule (higher number means lower priority</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1881">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1882">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="1883">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">true</B>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1887">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1890">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="1892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1893">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1894">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1899">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1900">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1901">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1902">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1904">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1905">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1906">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1908">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1909">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1910">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("rulename")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="1911">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_find</S>
          <Obj N="takes_args" RefId="1914">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1915">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsconfig_show" RefId="1918">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show the current global DNS configuration.</S>
          <Obj N="takes_options" RefId="1919">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1920">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1921">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1926">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1927">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1929">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1931">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1932">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1933">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1934">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1937">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1938">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1940">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsconfig_show</S>
          <Obj N="takes_args" RefId="1941">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_show" RefId="1942">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a user.</S>
          <Obj N="takes_options" RefId="1943">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="1945">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1947">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1949">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">out</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">file to store certificate in</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">out</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="1950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="1951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;out&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="1952">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1953">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1954">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1955">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1958">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1959">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1960">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1961">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1963">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1964">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1965">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1966">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1968">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1969">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1970">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_show</S>
          <Obj N="takes_args" RefId="1974">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1975">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="1976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="1977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_add_service" RefId="1978">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add services to an HBAC rule.</S>
          <Obj N="takes_options" RefId="1979">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="1980">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1981">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1982">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1984">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1985">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1986">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1987">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1988">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="1990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1992">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="1993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="1994">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="1995">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="1996">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="1997">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="1998">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="1999">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2001">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2002">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvc</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2005">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC service groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvcgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2006">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_add_service</S>
          <Obj N="takes_args" RefId="2008">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2009">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmd_mod" RefId="2012">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Sudo Command.</S>
          <Obj N="takes_options" RefId="2013">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2014">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this command</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2017">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2019">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2021">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2023">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2025">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2027">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2029">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2030">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2033">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2035">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2036">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2037">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2040">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2041">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2042">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2045">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2046">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2047">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2050">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2051">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmd_mod</S>
          <Obj N="takes_args" RefId="2056">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2057">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_del" RefId="2060">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an User ID override.</S>
          <Obj N="takes_options" RefId="2061">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2062">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2063">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2064">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2065">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2067">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2068">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2071">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2072">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2073">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2075">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_del</S>
          <Obj N="takes_args" RefId="2076">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2077">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2078">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2080">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2081">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2082">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_disallow_create_keytab" RefId="2083">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disallow users, groups, hosts or host groups to create a keytab of this service.</S>
          <Obj N="takes_options" RefId="2084">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2085">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2086">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2087">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2091">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2092">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2093">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2094">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2096">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2097">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2098">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2100">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2101">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2102">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2104">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2106">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2107">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2110">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2113">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2116">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2117">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_disallow_create_keytab</S>
          <Obj N="takes_args" RefId="2119">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2120">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2121">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_add" RefId="2123">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new IPA service.</S>
          <Obj N="takes_options" RefId="2124">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2125">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded service certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2127">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2128">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">pac_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['MS-PAC', 'PAD', 'NONE']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipakrbauthzdata</S>
                  <S N="doc">Override default list of supported PAC types. Use 'NONE' to disable PAC support for this service, e.g. this might be necessary for NFS services.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PAC type</S>
                  <Obj N="values" RefId="2130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>MS-PAC</S>
                      <S>PAD</S>
                      <S>NONE</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2132">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2135">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">requires_pre_auth</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="2136">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Requires pre-authentication</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbrequirespreauth</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Pre-authentication is required for the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2138">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2139">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2140">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="2141">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted for delegation</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbokasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Client credentials may be delegated to the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2142">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2144">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_to_auth_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="2146">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted to authenticate as user</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrboktoauthasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">The service is allowed to authenticate on behalf of a client</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2148">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2149">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2150">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2151">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2154">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2155">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2159">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">force principal name even if not in DNS</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2163">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2164">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2165">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2166">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2168">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2169">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2170">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2171">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2175">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2178">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2179">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2180">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2181">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2184">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_add</S>
          <Obj N="takes_args" RefId="2185">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2186">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_remove_user" RefId="2189">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users and groups from an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="2190">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2191">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2192">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2193">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2194">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2197">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2198">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2200">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2202">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2203">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2204">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2206">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2207">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2208">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2209">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2210">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2211">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2213">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2216">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_remove_user</S>
          <Obj N="takes_args" RefId="2219">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2220">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cosentry_find" RefId="2223">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="2224">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2225">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;cn&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2226">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2227">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2228">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbpwdpolicyreference</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;krbpwdpolicyreference&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbpwdpolicyreference</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;krbpwdpolicyreference&gt;</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2231">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cospriority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2232">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;cospriority&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">&lt;cospriority&gt;</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="2233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2234">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="2236">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2237">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="2239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2240">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2241">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2243">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2245">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2246">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2247">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2248">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2249">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2251">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2252">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2255">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2256">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2257">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("cn")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cosentry_find</S>
          <Obj N="takes_args" RefId="2261">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2262">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_del" RefId="2265">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an IPA service.</S>
          <Obj N="takes_options" RefId="2266">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2267">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2268">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2272">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_del</S>
          <Obj N="takes_args" RefId="2276">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2277">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2278">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add_service" RefId="2280">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add services to a CA ACL.</S>
          <Obj N="takes_options" RefId="2281">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2282">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2283">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2284">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2288">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2289">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2291">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2294">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2295">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2298">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2299">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2301">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2303">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2304">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add_service</S>
          <Obj N="takes_args" RefId="2307">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2308">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmd_add" RefId="2311">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create new Sudo Command.</S>
          <Obj N="takes_options" RefId="2312">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2313">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this command</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2316">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2317">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2318">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2320">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2321">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2323">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2324">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2325">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2327">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2330">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2331">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2332">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2335">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2336">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2337">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2340">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2341">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2343">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2344">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2345">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmd_add</S>
          <Obj N="takes_args" RefId="2346">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2347">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_remove_cert" RefId="2350">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove one or more certificates to the idoverrideuser entry</S>
          <Obj N="takes_options" RefId="2351">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2352">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2353">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2357">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2358">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2363">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2364">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2369">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2372">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2373">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2375">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_remove_cert</S>
          <Obj N="takes_args" RefId="2376">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2377">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2380">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="location_del" RefId="2383">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an IPA location.</S>
          <Obj N="takes_options" RefId="2384">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2385">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2386">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2390">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">location_del</S>
          <Obj N="takes_args" RefId="2394">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2395">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Location name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">IPA location name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_add_principal" RefId="2398">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new principal alias to the user entry</S>
          <Obj N="takes_options" RefId="2399">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2401">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2405">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2406">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2407">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2409">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2410">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2411">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2412">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2413">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2415">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2416">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2417">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2418">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2419">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2420">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2421">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_add_principal</S>
          <Obj N="takes_args" RefId="2422">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2423">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="2425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="2426">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2427">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="2428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idrange_del" RefId="2429">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an ID range.</S>
          <Obj N="takes_options" RefId="2430">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2431">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2432">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2434">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2436">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2437">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2439">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idrange_del</S>
          <Obj N="takes_args" RefId="2440">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2441">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Range name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Range name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_add_user" RefId="2444">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users and groups to an HBAC rule.</S>
          <Obj N="takes_options" RefId="2445">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2446">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2447">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2448">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2449">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2452">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2453">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2455">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2456">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2458">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2460">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2462">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2463">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2464">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2467">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2468">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2469">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2471">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2472">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_add_user</S>
          <Obj N="takes_args" RefId="2474">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2475">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_rename" RefId="2478">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Rename an ACI._x000A_ </S>
          <Obj N="takes_options" RefId="2479">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2480">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permission</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permission ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2481">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2482">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2483">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2486">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant(read, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2487">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2489">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes to which the permission applies</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2492">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['user', 'group', 'host', 'service', 'hostgroup', 'netgroup', 'dnsrecord']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">type of IPA object (user, group, host, hostgroup, service, netgroup)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Type</S>
                  <Obj N="values" RefId="2494">
                    <TNRef RefId="1" />
                    <LST>
                      <S>user</S>
                      <S>group</S>
                      <S>host</S>
                      <S>service</S>
                      <S>hostgroup</S>
                      <S>netgroup</S>
                      <S>dnsrecord</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="2495">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2496">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Member of a group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2497">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member of</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2499">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Legal LDAP filter (e.g. ou=Engineering)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2500">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2502">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2503">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2504">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2505">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2508">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">self</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2509">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Target your own entry (self)</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">selfaci</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Apply ACI to your own entry (self)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2511">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2513">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="2515">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="2516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2517">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">newname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">New ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">newname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;newname&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2521">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2525">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2526">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2527">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2528">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2530">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2532">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_rename</S>
          <Obj N="takes_args" RefId="2536">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2537">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2538">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_mod" RefId="2540">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a group.</S>
          <Obj N="takes_options" RefId="2541">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2542">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2544">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2545">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">GID (use this option to set it manually)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="2547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2548">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2552">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2553">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2556">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2560">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2561">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2564">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">posix</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2566">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;posix&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">posix</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">change to a POSIX group</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2570">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">external</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2571">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;external&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">external</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">change to support external non-IPA members from trusted domains</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2575">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2576">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2578">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2580">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2581">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2582">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2586">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2587">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2588">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2589">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2591">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2592">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2593">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2594">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2597">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Rename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Rename the group object</S>
                  <Obj N="flags" RefId="2599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_mod</S>
          <Obj N="takes_args" RefId="2600">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2601">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="2603">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_del" RefId="2604">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a CA ACL.</S>
          <Obj N="takes_options" RefId="2605">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2606">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2607">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2610">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2611">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_del</S>
          <Obj N="takes_args" RefId="2615">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2616">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2617">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cosentry_add" RefId="2619">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="2620">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2621">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbpwdpolicyreference</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;krbpwdpolicyreference&gt;</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpwdpolicyreference</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;krbpwdpolicyreference&gt;</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2624">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cospriority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;cospriority&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">&lt;cospriority&gt;</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="2626">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2627">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2629">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2631">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2635">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2636">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2641">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2642">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2643">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2645">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2647">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cosentry_add</S>
          <Obj N="takes_args" RefId="2651">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2652">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;cn&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_deny_command" RefId="2655">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add commands and sudo command groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="2656">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2657">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2658">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2660">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2661">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2663">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2664">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2666">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2668">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2669">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2670">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2672">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2673">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2674">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2675">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2676">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2677">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2678">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2679">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2682">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmdgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo command groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmdgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2683">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_deny_command</S>
          <Obj N="takes_args" RefId="2685">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2686">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2687">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_disallow_retrieve_keytab" RefId="2689">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disallow users, groups, hosts or host groups to retrieve a keytab of this host.</S>
          <Obj N="takes_options" RefId="2690">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2691">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2692">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2693">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2697">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2698">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2699">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2702">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2704">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2705">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2707">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2708">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2709">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2713">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2714">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2716">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2719">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2720">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2721">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2722">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2723">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_disallow_retrieve_keytab</S>
          <Obj N="takes_args" RefId="2725">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2726">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="krbtpolicy_mod" RefId="2729">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Kerberos ticket policy.</S>
          <Obj N="takes_options" RefId="2730">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2731">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2732">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max life</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbmaxticketlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum ticket life (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="2733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2734">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxrenew</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2735">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max renew</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbmaxrenewableage</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum renewable age (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="2736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2737">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2738">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2741">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2742">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2745">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2746">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2749">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2750">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2751">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2755">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2760">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2761">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2762">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2764">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2765">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2766">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2767">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2768">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">krbtpolicy_mod</S>
          <Obj N="takes_args" RefId="2770">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2771">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage ticket policy for specific user</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">uid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2772">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_del" RefId="2774">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a permission.</S>
          <Obj N="takes_options" RefId="2775">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2777">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2779">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2781">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2782">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">force delete of SYSTEM permissions</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2783">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2786">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2787">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2788">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_del</S>
          <Obj N="takes_args" RefId="2790">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2791">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2792">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="join" RefId="2794">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Join an IPA domain</S>
          <Obj N="takes_options" RefId="2795">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2796">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The IPA realm</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">realm</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="2797">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2798">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;realm&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2799">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">platform</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hardware platform of the host (e.g. Lenovo T61)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nshardwareplatform</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2800">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;nshardwareplatform&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2802">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">os</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Operating System and version of the host (e.g. Fedora 9)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsosversion</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;nsosversion&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2805">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2808">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">join</S>
          <Obj N="takes_args" RefId="2809">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2810">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The hostname to register as</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="2811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_add_managedby" RefId="2813">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users that can manage this token.</S>
          <Obj N="takes_options" RefId="2814">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2815">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2816">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2819">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2821">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2822">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2824">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2827">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2829">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2830">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2831">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2832">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2833">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2834">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2835">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2836">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2837">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_add_managedby</S>
          <Obj N="takes_args" RefId="2840">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2841">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_add_member" RefId="2844">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to Sudo Command Group.</S>
          <Obj N="takes_options" RefId="2845">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2846">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2847">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2848">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2850">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2851">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2852">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2853">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2857">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2858">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2859">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2861">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2862">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2863">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2864">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2868">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_add_member</S>
          <Obj N="takes_args" RefId="2871">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2872">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2873">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add" RefId="2875">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new CA ACL.</S>
          <Obj N="takes_options" RefId="2876">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2877">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2879">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2880">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="2881">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2885">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cacat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacacategory</S>
                  <S N="doc">CA category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CA category</S>
                  <Obj N="values" RefId="2887">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2889">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">profilecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacertprofilecategory</S>
                  <S N="doc">Profile category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Profile category</S>
                  <Obj N="values" RefId="2891">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2892">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2893">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="2895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2897">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="2899">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2900">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2901">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="2902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="2903">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="2904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="2905">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2906">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2909">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2913">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2914">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2915">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2918">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2919">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2920">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2921">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2924">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2930">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2931">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2932">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2934">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add</S>
          <Obj N="takes_args" RefId="2935">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2936">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2938">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="command_find" RefId="2939">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for commands.</S>
          <Obj N="takes_options" RefId="2940">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2941">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2942">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2944">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2947">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2948">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2950">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2952">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2953">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2954">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2957">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2958">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="2959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2961">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">command_find</S>
          <Obj N="takes_args" RefId="2962">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2963">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="2964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="2965">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selfservice_del" RefId="2966">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a self-service permission.</S>
          <Obj N="takes_options" RefId="2967">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2968">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selfservice_del</S>
          <Obj N="takes_args" RefId="2972">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2973">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Self-service name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aciname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Self-service name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="2974">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2975">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_show" RefId="2976">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a privilege.</S>
          <Obj N="takes_options" RefId="2977">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="2978">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="2979">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2981">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2983">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2984">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2985">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2988">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2989">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="2990">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="2991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="2992">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="2993">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2995">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="2996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="2997">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="2998">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="2999">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3000">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3001">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3002">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_show</S>
          <Obj N="takes_args" RefId="3005">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3006">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="output_show" RefId="3009">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a command output.</S>
          <Obj N="takes_options" RefId="3010">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3011">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3012">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3014">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3017">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3018">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3019">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3023">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3024">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">output_show</S>
          <Obj N="takes_args" RefId="3027">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3028">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">commandfull_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3031">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3032">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3033">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_mod" RefId="3034">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Sudo Command Group.</S>
          <Obj N="takes_options" RefId="3035">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3036">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3039">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3040">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3043">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3044">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3046">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3052">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3057">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3059">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3060">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3061">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3062">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3063">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3064">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3067">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3068">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3072">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3073">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3075">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3076">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_mod</S>
          <Obj N="takes_args" RefId="3078">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3079">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3081">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_mod" RefId="3082">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a user.</S>
          <Obj N="takes_options" RefId="3083">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3084">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3085">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3087">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3090">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3091">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3093">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">displayname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3096">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">initials</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3098">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3099">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3101">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3102">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3103">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3105">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3106">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3108">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3111">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3114">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3117">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3120">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3121">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3124">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3125">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random user password</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3126">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3128">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3129">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="3131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3132">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="3134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3135">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3138">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3141">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3144">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3147">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3148">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3150">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3151">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3153">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3156">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3158">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3159">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3162">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3165">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3168">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3171">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3174">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="3176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="3177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3178">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3181">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3184">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3187">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3189">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3190">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3193">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3194">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3196">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3199">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3202">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="3203">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Account disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsaccountlock</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Account disabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3204">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3206">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3207">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3208">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3211">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3215">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3219">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3220">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3223">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3224">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3225">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3227">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3228">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3230">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3231">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3232">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3233">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3235">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3236">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3237">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3240">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3241">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3243">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3245">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3246">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Rename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Rename the user object</S>
                  <Obj N="flags" RefId="3248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_mod</S>
          <Obj N="takes_args" RefId="3249">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3250">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="3252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="command_show" RefId="3253">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a command.</S>
          <Obj N="takes_options" RefId="3254">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3255">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3256">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3257">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3260">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3261">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3262">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3263">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3266">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3267">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3268">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">command_show</S>
          <Obj N="takes_args" RefId="3271">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3272">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">full_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">full_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_find" RefId="3275">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for permissions.</S>
          <Obj N="takes_options" RefId="3276">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3277">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3278">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3280">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3281">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">right</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['read', 'search', 'compare', 'write', 'add', 'delete', 'all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipapermright</S>
                  <S N="doc">Rights to grant (read, search, compare, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Granted rights</S>
                  <Obj N="values" RefId="3282">
                    <TNRef RefId="1" />
                    <LST>
                      <S>read</S>
                      <S>search</S>
                      <S>compare</S>
                      <S>write</S>
                      <S>add</S>
                      <S>delete</S>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="3283">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3284">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All attributes to which the permission applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Effective attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3287">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">includedattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User-specified attributes to which the permission applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermincludedattr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3288">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Included attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3290">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">excludedattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User-specified attributes to which the permission explicitly does not apply</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermexcludedattr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3291">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Excluded attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3293">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">defaultattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the permission applies by default</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermdefaultattr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3294">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Default attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3296">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">bindtype</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Bind rule type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipapermbindruletype</S>
                  <S N="cli_metavar">['permission', 'all', 'anonymous']</S>
                  <S N="default">permission</S>
                  <Obj N="values" RefId="3297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>all</S>
                      <S>anonymous</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3299">
                    <TNRef RefId="1" />
                    <LST>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <S N="doc">Bind rule type</S>
                </MS>
              </Obj>
              <Obj RefId="3300">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNORURL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply permissions to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3302">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNOrURL</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3303">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Extra target filter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">extratargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Extra target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3306">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rawfilter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All target filters, including those implied by type and memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermtargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3308">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Raw target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3309">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">target</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN to apply the permission to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermtarget</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3311">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3312">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetto</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree where an entry can be moved to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermtargetto</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3315">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetfrom</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree from where an entry can be moved (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipapermtargetfrom</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Origin DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3318">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Target members of a group (sets memberOf targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3319">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Member of group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3321">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group to apply permissions to (sets target)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3322">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3323">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3324">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Type of IPA object (sets subtree and objectClass targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">type</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3327">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use extratargetfilter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3328">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3329">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;filter&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3330">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermlocation</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;subtree&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3333">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermright</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3334">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;permissions&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3336">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="3338">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3339">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3340">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="3341">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3342">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3343">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3345">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3347">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3348">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3349">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3350">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3351">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3352">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3353">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3354">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3358">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3359">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3363">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3364">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3365">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3368">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_find</S>
          <Obj N="takes_args" RefId="3369">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3370">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_del" RefId="3373">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an automount map.</S>
          <Obj N="takes_options" RefId="3374">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3375">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3376">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3377">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3380">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3381">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_del</S>
          <Obj N="takes_args" RefId="3384">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3385">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3388">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_add_sourcehost" RefId="3391">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="3392">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3393">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3394">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3395">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3398">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3399">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3400">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3401">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3403">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3404">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3405">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3406">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3409">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3410">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3411">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3414">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3415">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3418">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3420">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_add_sourcehost</S>
          <Obj N="takes_args" RefId="3421">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3422">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3423">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_del" RefId="3425">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a user.</S>
          <Obj N="takes_options" RefId="3426">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3427">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3428">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3429">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3430">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3431">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3432">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">preserve</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3433">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>cli</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;preserve&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">preserve</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">&lt;preserve&gt;</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3435">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3438">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3439">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3441">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_del</S>
          <Obj N="takes_args" RefId="3442">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3443">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3444">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="3445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ping" RefId="3446">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Ping a remote server.</S>
          <Obj N="takes_options" RefId="3447">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3448">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3449">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ping</S>
          <Obj N="takes_args" RefId="3452">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_del" RefId="3453">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete DNS forward zone.</S>
          <Obj N="takes_options" RefId="3454">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3455">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3456">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3460">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_del</S>
          <Obj N="takes_args" RefId="3464">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3465">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_show" RefId="3468">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an IPA service.</S>
          <Obj N="takes_options" RefId="3469">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3470">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3471">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3475">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">out</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">file to store certificate in</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">out</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;out&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3478">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3479">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3481">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3482">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3483">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3484">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3485">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3487">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3490">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3491">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3492">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3493">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3494">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3495">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3496">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3497">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_show</S>
          <Obj N="takes_args" RefId="3500">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3501">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="env" RefId="3504">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show environment variables.</S>
          <Obj N="takes_options" RefId="3505">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3506">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">server</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3507">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;server&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">server</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Forward to server instead of running locally</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3508">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3510">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3511">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3512">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3517">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3520">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">env</S>
          <Obj N="takes_args" RefId="3521">
            <TNRef RefId="1" />
            <LST>
              <S>variables*</S>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="radiusproxy_mod" RefId="3522">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a RADIUS proxy server.</S>
          <Obj N="takes_options" RefId="3523">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3524">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this RADIUS proxy server</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3526">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3527">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The hostname or IP (with or without port)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusserver</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3528">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3529">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Server</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3530">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">secret</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The secret used to encrypt data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiussecret</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3532">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Secret</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3533">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiustimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The total timeout across all retries (in seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="3535">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3536">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retries</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Retries</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiusretries</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The number of times to retry authentication</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">10</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="3538">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3539">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">userattr</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The username attribute on the user object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenusermapattribute</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3541">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User attribute</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3542">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3544">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3546">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3548">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3549">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3550">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3553">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3554">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3555">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3556">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3559">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3560">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3561">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3566">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3571">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3574">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3575">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the RADIUS proxy server object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">radiusproxy_mod</S>
          <Obj N="takes_args" RefId="3578">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3579">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3581">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_add" RefId="3582">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new hostgroup.</S>
          <Obj N="takes_options" RefId="3583">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3584">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3587">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3588">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3589">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3590">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3591">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3593">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3595">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3596">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3598">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3601">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3602">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3603">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3604">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3605">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3607">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3611">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3612">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_add</S>
          <Obj N="takes_args" RefId="3617">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3618">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_delentry" RefId="3621">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Delete DNS record entry._x000A_ </S>
          <Obj N="takes_options" RefId="3622">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3623">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3624">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3625">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3626">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3627">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3628">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3631">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_delentry</S>
          <Obj N="takes_args" RefId="3632">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3633">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3635">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3636">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3637">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="json_metadata" RefId="3639">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Export plugin meta-data for the webUI._x000A_ </S>
          <Obj N="takes_options" RefId="3640">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3641">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">object</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of object to export</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">object</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;object&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3644">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">method</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of method to export</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">method</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3645">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3646">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;method&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3647">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of command to export</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">command</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;command&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3650">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">json_metadata</S>
          <Obj N="takes_args" RefId="3654">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3655">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">objname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of object to export</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">objname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3656">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;objname&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3658">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">methodname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of method to export</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">methodname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3660">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;methodname&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="location_mod" RefId="3661">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify information about an IPA location.</S>
          <Obj N="takes_options" RefId="3662">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3663">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">description</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA Location description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3665">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3666">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3667">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3670">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3671">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3672">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3674">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3675">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3676">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3677">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3678">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3679">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3680">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3682">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3683">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3684">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3685">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3687">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3688">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3689">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3690">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3692">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3695">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3698">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">location_mod</S>
          <Obj N="takes_args" RefId="3699">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3700">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Location name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">IPA location name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_del" RefId="3703">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete group.</S>
          <Obj N="takes_options" RefId="3704">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3705">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3706">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3707">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3708">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3710">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_del</S>
          <Obj N="takes_args" RefId="3714">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3715">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="3717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_remove_target" RefId="3718">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove target from a named service delegation rule.</S>
          <Obj N="takes_options" RefId="3719">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3721">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3726">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3727">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3731">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3732">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3733">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3736">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3737">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3738">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3739">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3741">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3742">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">servicedelegationtargets</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">service delegation targets to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">servicedelegationtarget</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service delegation target</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_remove_target</S>
          <Obj N="takes_args" RefId="3745">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3746">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="3748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_disable" RefId="3749">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable an HBAC rule.</S>
          <Obj N="takes_options" RefId="3750">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3751">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3752">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3754">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_disable</S>
          <Obj N="takes_args" RefId="3755">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3756">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_find" RefId="3759">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for service delegation target.</S>
          <Obj N="takes_options" RefId="3760">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3761">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="3763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="3764">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3765">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="3766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3767">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3768">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="3769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3770">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3771">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3774">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3775">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3777">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3781">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3782">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3783">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3786">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3787">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("delegation-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3788">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_find</S>
          <Obj N="takes_args" RefId="3791">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3792">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_remove_host" RefId="3795">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove target hosts and hostgroups from a CA ACL.</S>
          <Obj N="takes_options" RefId="3796">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3797">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3798">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3799">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3802">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3803">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3804">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3805">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3808">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3809">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3810">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3812">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3819">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3820">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3821">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3822">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3824">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_remove_host</S>
          <Obj N="takes_args" RefId="3825">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3826">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_add" RefId="3829">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new stage user.</S>
          <Obj N="takes_options" RefId="3830">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3831">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3834">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3835">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3836">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3837">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="3838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3840">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">displayname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="3841">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3843">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">initials</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="3844">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3846">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3847">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3849">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="3850">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3852">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3854">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3855">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="3857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3858">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3861">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3862">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3864">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3867">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3871">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="3872">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random user password</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3873">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3875">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3876">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="3878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3880">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="3881">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3882">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3884">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3885">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3888">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3889">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3891">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3892">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3893">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3894">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3895">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3897">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3900">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3903">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3906">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3909">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3912">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3915">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3918">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3919">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3921">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="3923">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="3924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3925">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3926">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3928">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3929">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3930">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3931">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3934">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3936">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3937">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3938">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3940">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3943">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3944">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3946">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="3947">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="3949">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3950">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3953">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3954">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3957">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">from_delete</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="3958">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;from_delete&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">from_delete</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Create Stage user in from a delete user</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="3959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3961">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">true</B>
                </MS>
              </Obj>
              <Obj RefId="3962">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3963">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3964">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3965">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3966">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3968">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3969">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3970">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3974">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3975">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3977">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="3978">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="3979">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="3980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="3981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="3982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_add</S>
          <Obj N="takes_args" RefId="3984">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3985">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="3986">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="3987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_disable" RefId="3988">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable a Sudo Rule.</S>
          <Obj N="takes_options" RefId="3989">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3990">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="3991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="3992">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="3993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_disable</S>
          <Obj N="takes_args" RefId="3994">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="3995">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="3996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="3997">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_add_noaci" RefId="3998">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Add a system permission without an ACI (internal command)</S>
          <Obj N="takes_options" RefId="3999">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4000">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ipapermissiontype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permission flags</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermissiontype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4001">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4002">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permission flags</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4003">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4004">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4005">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4006">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4008">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4009">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4010">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4011">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4012">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4014">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4015">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4017">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4019">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4020">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4021">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4023">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4024">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_add_noaci</S>
          <Obj N="takes_args" RefId="4025">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4026">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4027">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_unlock" RefId="4029">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Unlock a user account_x000A__x000A_ An account may become locked if the password is entered incorrectly too_x000A_ many times within a specific time period as controlled by password_x000A_ policy. A locked account is a temporary condition and may be unlocked by_x000A_ an administrator.</S>
          <Obj N="takes_options" RefId="4030">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4031">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4032">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4033">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4034">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_unlock</S>
          <Obj N="takes_args" RefId="4035">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4036">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="4038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="krbtpolicy_reset" RefId="4039">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Reset Kerberos ticket policy to the default values.</S>
          <Obj N="takes_options" RefId="4040">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4041">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4042">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4044">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4048">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4050">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4051">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4053">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4054">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4056">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">krbtpolicy_reset</S>
          <Obj N="takes_args" RefId="4057">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4058">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage ticket policy for specific user</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">uid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4060">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_del" RefId="4061">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete Sudo Command Group.</S>
          <Obj N="takes_options" RefId="4062">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4063">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4064">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4068">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_del</S>
          <Obj N="takes_args" RefId="4072">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4073">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4075">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_enable" RefId="4076">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable a Sudo Rule.</S>
          <Obj N="takes_options" RefId="4077">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4078">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4079">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4081">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_enable</S>
          <Obj N="takes_args" RefId="4082">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4083">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4084">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_show" RefId="4086">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display Sudo Command Group.</S>
          <Obj N="takes_options" RefId="4087">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4088">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4089">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4091">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4093">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4094">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4095">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4096">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4098">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4099">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4100">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4101">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4102">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4103">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4104">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4105">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4106">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4109">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4110">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4112">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4114">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_show</S>
          <Obj N="takes_args" RefId="4115">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4116">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4117">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_add_target" RefId="4119">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add target to a named service delegation rule.</S>
          <Obj N="takes_options" RefId="4120">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4121">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4122">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4124">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4125">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4126">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4127">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4128">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4132">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4133">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4134">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4135">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4136">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4137">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4138">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4139">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4141">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4142">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4143">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">servicedelegationtargets</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">service delegation targets to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">servicedelegationtarget</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service delegation target</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_add_target</S>
          <Obj N="takes_args" RefId="4146">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4147">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4148">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="4149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="kra_is_enabled" RefId="4150">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="4151">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4152">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4155">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">kra_is_enabled</S>
          <Obj N="takes_args" RefId="4156">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_find" RefId="4157">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for existing certificates.</S>
          <Obj N="takes_options" RefId="4158">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4159">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded certificate.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4161">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4162">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer DN</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">issuer</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4165">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">revocation_reason</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Revocation reason</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">revocation_reason</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Reason for revoking the certificate (0-10). Type "ipa help cert" for revocation reason details. </S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">10</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4167">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4168">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ca</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cacn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Issuing CA</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4171">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subject</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4172">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Subject</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4174">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">min_serial_number</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;min_serial_number&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">min_serial_number</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">minimum serial number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4177">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">max_serial_number</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;max_serial_number&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">max_serial_number</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">maximum serial number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4180">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">exactly</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4181">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;exactly&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">exactly</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">match the common name exactly</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4184">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4185">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">validnotafter_from</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Valid not after from this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">validnotafter_from</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;validnotafter_from&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4188">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4189">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">validnotafter_to</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Valid not after to this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">validnotafter_to</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;validnotafter_to&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4191">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">validnotbefore_from</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Valid not before from this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">validnotbefore_from</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;validnotbefore_from&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4194">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">validnotbefore_to</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Valid not before to this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">validnotbefore_to</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;validnotbefore_to&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4197">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuedon_from</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issued on from this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuedon_from</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4199">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;issuedon_from&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4200">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuedon_to</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issued on to this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuedon_to</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4202">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;issuedon_to&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4203">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">revokedon_from</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Revoked on from this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">revokedon_from</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;revokedon_from&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4206">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">revokedon_to</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Revoked on to this date (YYYY-mm-dd)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">revokedon_to</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;revokedon_to&gt;</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4209">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4210">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("certificate")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4211">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4214">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4216">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4217">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4219">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4220">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4221">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4226">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4227">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4231">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4232">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4233">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4235">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4236">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4237">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4238">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4241">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4242">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4243">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for certificates with these owner users.</S>
                  <Obj N="flags" RefId="4244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="4245">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">no_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for certificates without these owner users.</S>
                  <Obj N="flags" RefId="4247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="4248">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for certificates with these owner hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4251">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">no_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for certificates without these owner hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">no_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4253">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4254">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for certificates with these owner services.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4256">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">service</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4257">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">no_services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for certificates without these owner services.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">no_service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">service</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_find</S>
          <Obj N="takes_args" RefId="4260">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4261">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4262">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_mod" RefId="4264">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a SELinux User Map.</S>
          <Obj N="takes_options" RefId="4265">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4266">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">selinuxuser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SELinux User</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaselinuxuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4268">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">SELinux User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4269">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hbacrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC Rule that defines the users, groups and hostgroups</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">seealso</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">HBAC Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4272">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4273">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="4274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="4275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4276">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="4278">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="4279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4280">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4281">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4283">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4284">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4288">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4289">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4290">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4292">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4296">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4300">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4301">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4302">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4304">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4305">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4306">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4307">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4311">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4312">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4313">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4317">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4318">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4321">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4322">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_mod</S>
          <Obj N="takes_args" RefId="4327">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4328">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4329">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_role_show" RefId="4331">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show role status on a server</S>
          <Obj N="takes_options" RefId="4332">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4333">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4334">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4335">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4338">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4339">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4340">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4341">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4345">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4346">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4348">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_role_show</S>
          <Obj N="takes_args" RefId="4349">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4350">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">server_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4352">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4353">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">role</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">role_servrole</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_mod" RefId="4356">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify DNS zone (SOA record).</S>
          <Obj N="takes_options" RefId="4357">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4358">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4361">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4363">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4364">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4365">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="4366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="4367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4368">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name_server</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Authoritative nameserver</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoamname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Authoritative nameserver domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4369">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4371">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">admin_email</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Administrator e-mail address</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="default"></S>
                  <S N="doc">Administrator e-mail address</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4373">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4374">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA serial</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaserial</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SOA record serial number</S>
                  <B N="required">false</B>
                  <I64 N="maxvalue">4294967295</I64>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="4376">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4377">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">refresh</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA refresh</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarefresh</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">SOA record refresh time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4379">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4380">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retry</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA retry</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaretry</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">900</I32>
                  <S N="doc">SOA record retry time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4382">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4383">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">expire</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA expire</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaexpire</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">1209600</I32>
                  <S N="doc">SOA record expire time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4385">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4386">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minimum</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA minimum</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaminimum</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">How long should negative responses be cached</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4388">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4389">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records at zone apex</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4391">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4392">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">default_ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Default time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsdefaultttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records without explicit TTL definition</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4395">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="4397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="4398">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4399">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">update_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">BIND update policy</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsupdatepolicy</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4400">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">BIND update policy</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4402">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dynamic_update</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4403">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Dynamic update</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowdynupdate</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow dynamic updates.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4404">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4405">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4407">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_query</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow query</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowquery</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">any;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to issue queries</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4410">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_transfer</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow transfer</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowtransfer</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">none;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to transfer the zone</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4412">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4413">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_sync_ptr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4414">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow PTR sync</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowsyncptr</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4415">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4418">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnssec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4419">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow in-line DNSSEC signing</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssecinlinesigning</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow inline DNSSEC signing of records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4422">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4423">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">expected format: &lt;0-255&gt; &lt;0-255&gt; &lt;0-65535&gt; even-length_hexadecimal_digits_or_hyphen</S>
                  <S N="cli_name">nsec3param_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^\d+ \d+ \d+ (([0-9a-fA-F]{2})+|-)$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC3PARAM record</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsec3paramrecord</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4426">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4430">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4431">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4434">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4435">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4438">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4439">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4440">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4441">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4443">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4444">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force nameserver change even if nameserver not in DNS</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4445">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4447">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4448">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4449">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4453">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4454">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4455">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4456">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4460">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_mod</S>
          <Obj N="takes_args" RefId="4464">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4465">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idrange_show" RefId="4468">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a range.</S>
          <Obj N="takes_options" RefId="4469">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4470">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4471">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4475">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4476">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4477">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4481">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4482">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4483">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4487">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idrange_show</S>
          <Obj N="takes_args" RefId="4491">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4492">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Range name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Range name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_disable" RefId="4495">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable a CA ACL.</S>
          <Obj N="takes_options" RefId="4496">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4497">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4498">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4499">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4500">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_disable</S>
          <Obj N="takes_args" RefId="4501">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4502">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4504">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_disable" RefId="4505">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable DNS Zone.</S>
          <Obj N="takes_options" RefId="4506">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4507">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4508">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_disable</S>
          <Obj N="takes_args" RefId="4511">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4512">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4513">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_add_internal" RefId="4515">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="4516">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4517">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipavaulttype</S>
                  <S N="cli_metavar">['standard', 'symmetric', 'asymmetric']</S>
                  <S N="default">symmetric</S>
                  <Obj N="values" RefId="4521">
                    <TNRef RefId="1" />
                    <LST>
                      <S>standard</S>
                      <S>symmetric</S>
                      <S>asymmetric</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4522">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4523">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault type</S>
                </MS>
              </Obj>
              <Obj RefId="4524">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">salt</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault salt</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipavaultsalt</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4526">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Salt</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4527">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">public_key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault public key</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipavaultpublickey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Public key</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4530">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4532">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4534">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4536">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4538">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4541">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4542">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4544">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4546">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4548">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4549">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4550">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4552">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4553">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4554">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4555">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4556">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4558">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4560">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4561">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4566">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_add_internal</S>
          <Obj N="takes_args" RefId="4571">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4572">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="4574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topic_find" RefId="4575">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for help topics.</S>
          <Obj N="takes_options" RefId="4576">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4577">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4578">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4580">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4581">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4583">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4584">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4585">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4586">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4588">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4589">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4593">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4594">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4596">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topic_find</S>
          <Obj N="takes_args" RefId="4598">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4599">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4600">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_show" RefId="4602">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a permission.</S>
          <Obj N="takes_options" RefId="4603">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4604">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4605">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4607">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4609">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4610">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4615">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4616">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4617">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4621">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4622">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4624">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4625">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4626">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4627">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4629">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4630">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_show</S>
          <Obj N="takes_args" RefId="4631">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4632">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="delegation_mod" RefId="4635">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a delegation.</S>
          <Obj N="takes_options" RefId="4636">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4637">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4640">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the delegation applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4641">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4643">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">membergroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group to apply delegation to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4645">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member user group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4646">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4649">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4650">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4654">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4655">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4656">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4657">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4660">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4661">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">delegation_mod</S>
          <Obj N="takes_args" RefId="4665">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4666">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delegation name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delegation name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_verify" RefId="4669">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_Verify replication topology for suffix._x000A__x000A_Checks done:_x000A_ 1. check if a topology is not disconnected. In other words if there are_x000A_ replication paths between all servers._x000A_ 2. check if servers don't have more than the recommended number of_x000A_ replication agreements_x000A_</S>
          <Obj N="takes_options" RefId="4670">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4671">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4672">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4674">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_verify</S>
          <Obj N="takes_args" RefId="4675">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4676">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4677">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_mod" RefId="4679">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an existing IPA service.</S>
          <Obj N="takes_options" RefId="4680">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4681">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4682">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4684">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded service certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4687">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">pac_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['MS-PAC', 'PAD', 'NONE']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipakrbauthzdata</S>
                  <S N="doc">Override default list of supported PAC types. Use 'NONE' to disable PAC support for this service, e.g. this might be necessary for NFS services.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PAC type</S>
                  <Obj N="values" RefId="4689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>MS-PAC</S>
                      <S>PAD</S>
                      <S>NONE</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="4690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4691">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4692">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4694">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">requires_pre_auth</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4695">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Requires pre-authentication</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbrequirespreauth</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Pre-authentication is required for the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4698">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4699">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4700">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted for delegation</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrbokasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Client credentials may be delegated to the service</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4703">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4704">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ok_to_auth_as_delegate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="4705">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Trusted to authenticate as user</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipakrboktoauthasdelegate</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">The service is allowed to authenticate on behalf of a client</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4708">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4709">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4713">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4714">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4717">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4718">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4719">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4720">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4721">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4722">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4726">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4727">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4731">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4732">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4733">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4734">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4737">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4738">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4739">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4741">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4742">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4743">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4744">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4745">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4747">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_mod</S>
          <Obj N="takes_args" RefId="4748">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4749">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dns_is_enabled" RefId="4752">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Checks if any of the servers has the DNS service enabled._x000A_ </S>
          <Obj N="takes_options" RefId="4753">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dns_is_enabled</S>
          <Obj N="takes_args" RefId="4758">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_remove_member" RefId="4759">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from Sudo Command Group.</S>
          <Obj N="takes_options" RefId="4760">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4761">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4762">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4765">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4767">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4768">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4773">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4777">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4778">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4780">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4782">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4783">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_remove_member</S>
          <Obj N="takes_args" RefId="4786">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4787">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4788">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="radiusproxy_add" RefId="4790">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new RADIUS proxy server.</S>
          <Obj N="takes_options" RefId="4791">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4792">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this RADIUS proxy server</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4795">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The hostname or IP (with or without port)</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusserver</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4797">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Server</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4798">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">secret</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The secret used to encrypt data</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiussecret</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4799">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4800">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Secret</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4801">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiustimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The total timeout across all retries (in seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="4803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4804">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retries</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Retries</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenradiusretries</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">The number of times to retry authentication</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">10</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="4806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4807">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">userattr</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">The username attribute on the user object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenusermapattribute</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User attribute</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4810">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4811">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4814">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4818">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4819">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4824">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4825">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4827">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4829">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4830">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4833">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">radiusproxy_add</S>
          <Obj N="takes_args" RefId="4834">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4835">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4836">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_find" RefId="4838">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Search for automember rules._x000A_ </S>
          <Obj N="takes_options" RefId="4839">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4840">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4841">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4843">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4844">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="4845">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="4846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4847">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4848">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4853">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4854">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4856">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4858">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4859">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4860">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4861">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4863">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="4864">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("automember-rule")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="4865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_find</S>
          <Obj N="takes_args" RefId="4868">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4869">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4871">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_add_cert" RefId="4872">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add certificates to host entry</S>
          <Obj N="takes_options" RefId="4873">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4874">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4875">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4877">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4880">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4881">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4883">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4884">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4886">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4887">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4890">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4891">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4893">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4896">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="4897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded host certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_add_cert</S>
          <Obj N="takes_args" RefId="4899">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4900">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_remove_member" RefId="4903">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from a role.</S>
          <Obj N="takes_options" RefId="4904">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4905">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4906">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4907">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4908">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4911">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4912">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4914">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4917">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4918">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4921">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4922">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4923">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4924">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4925">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4927">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4929">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4930">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4933">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4936">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4938">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4939">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_remove_member</S>
          <Obj N="takes_args" RefId="4942">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4943">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4944">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_disable" RefId="4946">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="4947">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4948">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_disable</S>
          <Obj N="takes_args" RefId="4952">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4953">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4954">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_activate" RefId="4956">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Activate a stage user.</S>
          <Obj N="takes_options" RefId="4957">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4958">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4959">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4960">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4961">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4963">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4964">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4965">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4966">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4970">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4974">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4975">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4976">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="4977">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="4978">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_activate</S>
          <Obj N="takes_args" RefId="4980">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4981">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="4982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="4983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_add" RefId="4984">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new role.</S>
          <Obj N="takes_options" RefId="4985">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="4986">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this role-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="4987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="4988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="4989">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4990">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4991">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4992">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4993">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="4994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="4995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="4996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="4997">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="4998">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="4999">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5000">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5001">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5002">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5003">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5004">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5005">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5006">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5008">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5009">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5010">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5012">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5013">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5014">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5017">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_add</S>
          <Obj N="takes_args" RefId="5019">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5020">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_add_permission" RefId="5023">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a permission for per-zone access delegation.</S>
          <Obj N="takes_options" RefId="5024">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5025">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5027">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_add_permission</S>
          <Obj N="takes_args" RefId="5029">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5030">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5031">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvc_find" RefId="5033">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for HBAC services.</S>
          <Obj N="takes_options" RefId="5034">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5035">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5036">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5038">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5039">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5041">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="5043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5044">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="5046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5048">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5050">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5051">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5053">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5054">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5056">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5057">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5059">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5060">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5061">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5062">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5063">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5064">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5066">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5069">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5070">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("service")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5072">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvc_find</S>
          <Obj N="takes_args" RefId="5074">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5075">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5076">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5077">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_del" RefId="5078">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete service delegation target.</S>
          <Obj N="takes_options" RefId="5079">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5080">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5081">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5082">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5083">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5084">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5085">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5086">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5087">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_del</S>
          <Obj N="takes_args" RefId="5089">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5090">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5091">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="5092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_show" RefId="5093">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a DNS zone (SOA record).</S>
          <Obj N="takes_options" RefId="5094">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5095">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5096">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5097">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5098">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5100">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5101">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5102">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5112">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5113">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5115">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_show</S>
          <Obj N="takes_args" RefId="5116">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5117">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="i18n_messages" RefId="5120">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="5121">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5122">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5125">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">i18n_messages</S>
          <Obj N="takes_args" RefId="5126">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_allow_retrieve_keytab" RefId="5127">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Allow users, groups, hosts or host groups to retrieve a keytab of this service.</S>
          <Obj N="takes_options" RefId="5128">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5129">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5130">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5131">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5132">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5134">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5135">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5136">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5138">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5141">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5142">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5144">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5146">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5148">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5150">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5151">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5154">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5157">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5158">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5160">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_allow_retrieve_keytab</S>
          <Obj N="takes_args" RefId="5163">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5164">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_remove_member" RefId="5167">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from a vault.</S>
          <Obj N="takes_options" RefId="5168">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5169">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5172">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5173">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5177">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5180">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5181">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5183">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5184">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5185">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5186">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5187">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5188">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5191">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5192">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5193">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5194">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5195">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5196">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5197">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5198">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5201">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5202">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5205">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5208">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_remove_member</S>
          <Obj N="takes_args" RefId="5211">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5212">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="5214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvc_del" RefId="5215">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an existing HBAC service.</S>
          <Obj N="takes_options" RefId="5216">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5217">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5218">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5220">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5222">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvc_del</S>
          <Obj N="takes_args" RefId="5226">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5227">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5228">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Service name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add_profile" RefId="5230">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add profiles to a CA ACL.</S>
          <Obj N="takes_options" RefId="5231">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5232">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5233">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5234">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5235">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5237">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5238">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5239">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5240">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5241">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5243">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5244">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5245">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5247">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5248">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5249">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5250">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5251">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5254">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">certprofiles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Certificate Profiles to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certprofile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5256">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member Certificate Profile</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add_profile</S>
          <Obj N="takes_args" RefId="5257">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5258">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_remove_service" RefId="5261">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove services from a CA ACL.</S>
          <Obj N="takes_options" RefId="5262">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5263">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5264">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5265">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5266">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5267">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5268">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5269">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5270">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5271">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5272">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5273">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5275">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5276">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5278">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5279">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5280">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5282">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5284">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5285">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_remove_service</S>
          <Obj N="takes_args" RefId="5288">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5289">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5290">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_del" RefId="5292">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a trust.</S>
          <Obj N="takes_options" RefId="5293">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5294">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5295">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5296">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5297">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5299">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5302">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_del</S>
          <Obj N="takes_args" RefId="5303">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5304">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_del" RefId="5307">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a stage user.</S>
          <Obj N="takes_options" RefId="5308">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5309">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5310">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5311">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5312">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5314">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5315">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5317">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_del</S>
          <Obj N="takes_args" RefId="5318">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5319">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="5321">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_default_group_remove" RefId="5322">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Remove default (fallback) group for all unmatched entries._x000A_ </S>
          <Obj N="takes_options" RefId="5323">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5324">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5327">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="5329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="5330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5331">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5332">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5334">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5337">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5338">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5340">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5341">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5343">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5346">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_default_group_remove</S>
          <Obj N="takes_args" RefId="5347">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="config_mod" RefId="5348">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify configuration options.</S>
          <Obj N="takes_options" RefId="5349">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5350">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxusername</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Maximum username length</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipamaxusernamelength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum username length</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="5352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5353">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedirectory</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default location of home directories</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipahomesrootdir</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory base</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5356">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">defaultshell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default shell for new users</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadefaultloginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5358">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Default shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5359">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">defaultgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default group for new users</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadefaultprimarygroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Default users group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5362">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">emaildomain</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default e-mail domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadefaultemaildomain</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5363">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5364">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Default e-mail domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5365">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">searchtimelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Search time limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipasearchtimelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum amount of time (seconds) for a search (-1 or 0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-1</I32>
                  <Obj N="flags" RefId="5367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5368">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">searchrecordslimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5369">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Search size limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipasearchrecordslimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of records to search (-1 or 0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-1</I32>
                  <Obj N="flags" RefId="5370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5371">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">usersearch</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A comma-separated list of fields to search in when searching for users</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipausersearchfields</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5372">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User search fields</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5374">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">groupsearch</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A comma-separated list of fields to search in when searching for groups</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipagroupsearchfields</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5375">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Group search fields</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5377">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">enable_migration</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="5378">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enable migration mode</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipamigrationenabled</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enable migration mode</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5379">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5380">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5381">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5382">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">groupobjectclasses</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default group objectclasses (comma-separated list)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipagroupobjectclasses</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Default group objectclasses</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5385">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">userobjectclasses</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default user objectclasses (comma-separated list)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipauserobjectclasses</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Default user objectclasses</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5388">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pwdexpnotify</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Password Expiration Notification (days)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipapwdexpadvnotify</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of days's notice of impending password expiration</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="5390">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5391">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">ipaconfigstring</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['AllowNThash', 'KDC:Disable Last Success', 'KDC:Disable Lockout', 'KDC:Disable Default Preauth for SPNs']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipaconfigstring</S>
                  <S N="doc">Extra hashes to generate in password plug-in</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Password plugin features</S>
                  <Obj N="values" RefId="5393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>AllowNThash</S>
                      <S>KDC:Disable Last Success</S>
                      <S>KDC:Disable Lockout</S>
                      <S>KDC:Disable Default Preauth for SPNs</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5395">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaselinuxusermaporder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Order in increasing priority of SELinux users, delimited by $</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaselinuxusermaporder</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">SELinux user map order</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5398">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaselinuxusermapdefault</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default SELinux user when no match is found in SELinux map rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaselinuxusermapdefault</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5400">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Default SELinux user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5401">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">pac_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['MS-PAC', 'PAD', 'nfs:NONE']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipakrbauthzdata</S>
                  <S N="doc">Default types of PAC supported for services</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Default PAC types</S>
                  <Obj N="values" RefId="5403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>MS-PAC</S>
                      <S>PAD</S>
                      <S>nfs:NONE</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5405">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp', 'disabled']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Default types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Default user authentication types</S>
                  <Obj N="values" RefId="5407">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                      <S>disabled</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5409">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ca_renewal_master_server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Renewal master for IPA certificate authority</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ca_renewal_master_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5410">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">IPA CA renewal master</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5412">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain_resolution_order</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">colon-separated list of domains used for short name qualification</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadomainresolutionorder</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain resolution order</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5415">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5419">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5422">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5423">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5426">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5427">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5428">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5429">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5430">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5431">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5432">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5433">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5435">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5437">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5438">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5439">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5440">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5441">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5443">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5444">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5445">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5447">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">config_mod</S>
          <Obj N="takes_args" RefId="5448">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_add_principal" RefId="5449">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new principal alias to the stageuser entry</S>
          <Obj N="takes_options" RefId="5450">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5451">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5452">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5453">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5456">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5457">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5458">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5461">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5463">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5464">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5465">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5466">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5467">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5468">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5470">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5471">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_add_principal</S>
          <Obj N="takes_args" RefId="5473">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5474">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5475">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="5476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="5477">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5478">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsserver_show" RefId="5480">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display configuration of a DNS server.</S>
          <Obj N="takes_options" RefId="5481">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5482">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5483">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5486">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5487">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5488">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5493">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5494">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5495">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5496">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5498">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5499">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5500">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5502">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsserver_show</S>
          <Obj N="takes_args" RefId="5503">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5504">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">DNS Server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsserverid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5505">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="delegation_add" RefId="5507">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new delegation.</S>
          <Obj N="takes_options" RefId="5508">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5509">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5510">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5511">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5512">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the delegation applies</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5513">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5515">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">membergroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group to apply delegation to</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5516">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5517">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member user group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5518">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5520">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5521">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5522">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5524">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5526">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5527">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5528">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5530">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5533">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5535">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">delegation_add</S>
          <Obj N="takes_args" RefId="5537">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5538">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delegation name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delegation name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_add_member" RefId="5541">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Add members to a permission.</S>
          <Obj N="takes_options" RefId="5542">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5543">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5544">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5548">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5549">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5550">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5552">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5553">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5554">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5555">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5556">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5558">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5559">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5560">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5561">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5565">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">privileges</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">privileges to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">privilege</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member privilege</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_add_member</S>
          <Obj N="takes_args" RefId="5568">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5569">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5570">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_add_member" RefId="5572">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to an HBAC service group.</S>
          <Obj N="takes_options" RefId="5573">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5574">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5575">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5578">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5580">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5581">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5585">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5586">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5587">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5589">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5590">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5591">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5593">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5596">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvc</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_add_member</S>
          <Obj N="takes_args" RefId="5599">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5600">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_add_cert" RefId="5603">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new certificates to a service</S>
          <Obj N="takes_options" RefId="5604">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5605">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5606">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5611">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5612">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5617">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5621">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5622">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5623">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5624">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5626">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5627">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded service certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_add_cert</S>
          <Obj N="takes_args" RefId="5630">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5631">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5632">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_find" RefId="5634">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for topology suffixes.</S>
          <Obj N="takes_options" RefId="5635">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5636">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5637">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5639">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">suffix_dn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Managed LDAP suffix DN</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">iparepltopoconfroot</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5641">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Managed LDAP suffix DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5642">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="5644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5645">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5646">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="5647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5648">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5649">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5654">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5655">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5657">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5660">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5662">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5663">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5664">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5665">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5666">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_find</S>
          <Obj N="takes_args" RefId="5669">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5670">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5672">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvc_add" RefId="5673">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new HBAC service.</S>
          <Obj N="takes_options" RefId="5674">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5675">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5676">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5677">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5678">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5679">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5682">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5687">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5688">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5692">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5693">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5696">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5697">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5698">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5699">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5700">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5702">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5703">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5704">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5707">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvc_add</S>
          <Obj N="takes_args" RefId="5708">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5709">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5710">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add_user" RefId="5712">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users and groups to a CA ACL.</S>
          <Obj N="takes_options" RefId="5713">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5714">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5715">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5717">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5721">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5726">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5727">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5730">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5731">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5733">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5736">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5739">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5741">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add_user</S>
          <Obj N="takes_args" RefId="5742">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5743">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5745">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_show" RefId="5746">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the properties of a CA ACL.</S>
          <Obj N="takes_options" RefId="5747">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5748">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5749">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5750">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5753">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5754">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5759">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5760">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5762">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5765">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5768">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5769">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5770">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5771">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_show</S>
          <Obj N="takes_args" RefId="5775">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5776">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5777">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5778">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_add" RefId="5779">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new user.</S>
          <Obj N="takes_options" RefId="5780">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5781">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5783">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5784">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5787">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5788">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5790">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">displayname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5791">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5792">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5793">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">initials</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5796">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5797">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5798">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5799">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5800">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5802">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5805">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="5807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5808">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5811">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5814">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5815">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5817">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5819">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5820">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5821">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5822">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random user password</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5824">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5826">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="5828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5830">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="5831">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5832">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5835">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5836">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5838">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5840">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5841">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5844">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5847">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5850">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5853">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5854">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5856">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5859">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5861">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5862">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5865">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5868">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5869">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5871">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="5873">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5875">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5876">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5878">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5879">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5880">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5881">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5882">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5884">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5887">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5889">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5890">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5892">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5893">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5895">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5896">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5899">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="5900">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Account disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsaccountlock</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Account disabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5901">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5903">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5904">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5905">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5908">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5909">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5912">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">noprivate</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="5913">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;noprivate&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">noprivate</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Don't create user private group</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5914">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5917">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5918">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5919">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5923">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5924">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5925">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5932">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5933">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5934">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5935">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5938">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_add</S>
          <Obj N="takes_args" RefId="5939">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5940">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="5941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="5942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_add" RefId="5943">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new SELinux User Map.</S>
          <Obj N="takes_options" RefId="5944">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5945">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">selinuxuser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SELinux User</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaselinuxuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5947">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">SELinux User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5948">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hbacrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC Rule that defines the users, groups and hostgroups</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">seealso</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">HBAC Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5951">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="5953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5954">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5955">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="5956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="5957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="5958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5959">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="5961">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="5962">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="5963">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="5964">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5965">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5966">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5967">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5968">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5969">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5971">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5972">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5974">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5975">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5976">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5977">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5982">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5987">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="5988">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="5989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5990">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="5991">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="5992">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="5993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="5994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="5995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="5996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_add</S>
          <Obj N="takes_args" RefId="5997">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="5998">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="5999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_find" RefId="6001">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for service delegations rule.</S>
          <Obj N="takes_options" RefId="6002">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6003">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="6005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="6006">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6008">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6009">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6011">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6012">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6013">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6014">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6017">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6018">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6019">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6021">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6023">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6024">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6026">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6027">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6028">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6029">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6030">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6035">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("delegation-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6036">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_find</S>
          <Obj N="takes_args" RefId="6039">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6040">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idrange_add" RefId="6043">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Add new ID range._x000A__x000A_ To add a new ID range you always have to specify_x000A__x000A_ --base-id_x000A_ --range-size_x000A__x000A_ Additionally_x000A__x000A_ --rid-base_x000A_ --secondary-rid-base_x000A__x000A_ may be given for a new ID range for the local domain while_x000A__x000A_ --rid-base_x000A_ --dom-sid_x000A__x000A_ must be given to add a new range for a trusted AD domain._x000A__x000A_=======_x000A_WARNING:_x000A__x000A_DNA plugin in 389-ds will allocate IDs based on the ranges configured for the_x000A_local domain. Currently the DNA plugin *cannot* be reconfigured itself based_x000A_on the local ranges set via this family of commands._x000A__x000A_Manual configuration change has to be done in the DNA plugin configuration for_x000A_the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix_x000A_IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be_x000A_modified to match the new range._x000A_=======_x000A__x000A_</S>
          <Obj N="takes_options" RefId="6044">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6045">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">base_id</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6046">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First Posix ID of the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaseid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First Posix ID of the range</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="6047">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6048">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">range_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Number of IDs in the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaidrangesize</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of IDs in the range</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="6050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6052">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the corresponding RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the corresponding RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="6053">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6054">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">secondary_rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the secondary RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipasecondarybaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the secondary RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="6056">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6057">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">dom_sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain SID of the trusted domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain SID of the trusted domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6060">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">dom_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of the trusted domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6061">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name of the trusted domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6063">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6064">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['ipa-ad-trust', 'ipa-ad-trust-posix', 'ipa-local']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">iparangetype</S>
                  <S N="doc">ID range type, one of ipa-ad-trust, ipa-ad-trust-posix, ipa-local</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Range type</S>
                  <Obj N="values" RefId="6065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ipa-ad-trust</S>
                      <S>ipa-ad-trust-posix</S>
                      <S>ipa-local</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="6066">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6067">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6069">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6071">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6075">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6076">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6080">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6081">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6082">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6083">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6086">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6087">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idrange_add</S>
          <Obj N="takes_args" RefId="6091">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6092">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Range name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6093">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Range name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_del" RefId="6095">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Delete a topology suffix.</S>
          <Obj N="takes_options" RefId="6096">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6097">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6098">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6101">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6102">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_del</S>
          <Obj N="takes_args" RefId="6106">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6107">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_del" RefId="6110">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete service delegation.</S>
          <Obj N="takes_options" RefId="6111">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6112">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6113">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6114">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6117">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6120">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_del</S>
          <Obj N="takes_args" RefId="6121">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6122">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="6123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="6124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_find" RefId="6125">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for DNS forward zones.</S>
          <Obj N="takes_options" RefId="6126">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6127">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6128">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6130">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6131">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6133">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">zone_active</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="6134">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Active zone</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnszoneactive</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Is zone active?</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6138">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6141">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="6143">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="6144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6148">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6150">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6151">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6152">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6154">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6156">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6157">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6158">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6159">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6162">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6163">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6166">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6167">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6168">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_find</S>
          <Obj N="takes_args" RefId="6172">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6173">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_mod" RefId="6176">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a segment.</S>
          <Obj N="takes_options" RefId="6177">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6178">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">stripattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A space separated list of attributes which are removed from replication updates.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicastripattrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to strip</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6181">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a fractional update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicatedattributelist</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to replicate</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6184">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrstotal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a total update. E.g. (objectclass=*) $ EXCLUDE accountlockout</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicatedattributelisttotal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes for total update</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6187">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Session timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsds5replicatimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of seconds outbound LDAP operations waits for a response from the remote replica before timing out and failing</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6189">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6190">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">enabled</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['on', 'off']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">nsds5replicaenabled</S>
                  <S N="doc">Whether a replication agreement is active, meaning whether replication is occurring per that agreement</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Replication agreement enabled</S>
                  <Obj N="values" RefId="6192">
                    <TNRef RefId="1" />
                    <LST>
                      <S>on</S>
                      <S>off</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="6193">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6194">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6195">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6198">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6202">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6203">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6206">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6207">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6208">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6211">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6212">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6214">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6217">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6218">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6223">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6224">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6225">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_mod</S>
          <Obj N="takes_args" RefId="6227">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6228">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6231">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="6232">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_add" RefId="6234">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Add a new topology suffix to be managed.</S>
          <Obj N="takes_options" RefId="6235">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6236">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">suffix_dn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Managed LDAP suffix DN</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">iparepltopoconfroot</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Managed LDAP suffix DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6239">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6240">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6241">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6243">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6244">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6247">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6248">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6249">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6250">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6252">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6253">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6254">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6255">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6256">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6259">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6260">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6262">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_add</S>
          <Obj N="takes_args" RefId="6263">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6264">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_remove_member" RefId="6267">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from a group.</S>
          <Obj N="takes_options" RefId="6268">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6269">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">external</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Members of a trusted domain in DOM\name or name@domain form</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaexternalmember</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External member</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6272">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6273">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6277">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6278">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6279">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6280">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6283">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6284">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6288">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6289">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6291">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6294">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6297">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_remove_member</S>
          <Obj N="takes_args" RefId="6300">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6301">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="6302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="6303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_mod" RefId="6304">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a OTP token.</S>
          <Obj N="takes_options" RefId="6305">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6306">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token description (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6308">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6309">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">owner</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned user of the token (default: self)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenowner</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6311">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Owner</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6312">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="6313">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokendisabled</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Mark the token as disabled (default: false)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6317">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6318">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_before</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokennotbefore</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity start</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6320">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6321">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_after</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokennotafter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity end</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6323">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">vendor</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token vendor name (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenvendor</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6324">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Vendor</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6326">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">model</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token model (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenmodel</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6327">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Model</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6329">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">serial</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token serial (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenserial</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Serial</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6332">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6336">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6337">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6339">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6340">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6341">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6344">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6345">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6346">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6349">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6350">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6351">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6353">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6355">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6356">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6358">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6359">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6361">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6363">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6364">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6365">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6366">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6369">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6371">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the OTP token object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6372">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_mod</S>
          <Obj N="takes_args" RefId="6374">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6375">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6376">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6377">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_add_indirect" RefId="6378">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new indirect mount point.</S>
          <Obj N="takes_options" RefId="6379">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6380">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6383">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6384">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6385">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6387">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6388">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6391">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">mount</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount point</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">key</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount point</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6394">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">parentmap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Parent map</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">parentmap</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">auto.master</S>
                  <S N="doc">Name of parent automount map (default: auto.master).</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6395">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6397">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6398">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6400">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6403">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6404">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6405">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6406">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6409">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6410">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_add_indirect</S>
          <Obj N="takes_args" RefId="6413">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6414">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6417">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_mod" RefId="6420">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an automount map.</S>
          <Obj N="takes_options" RefId="6421">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6422">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6423">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6425">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6426">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6427">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6429">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6430">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6431">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6433">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6437">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6438">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6439">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6441">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6442">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6443">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6445">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6447">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6448">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6449">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6453">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6454">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6455">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6456">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_mod</S>
          <Obj N="takes_args" RefId="6458">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6459">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6460">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6461">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6462">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6463">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmd_del" RefId="6465">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete Sudo Command.</S>
          <Obj N="takes_options" RefId="6466">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6467">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6468">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6471">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6472">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmd_del</S>
          <Obj N="takes_args" RefId="6476">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6477">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6478">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Sudo Command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vaultcontainer_del" RefId="6480">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a vault container.</S>
          <Obj N="takes_options" RefId="6481">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6482">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6483">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6486">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6487">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6490">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6491">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6495">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6496">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6498">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6501">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vaultcontainer_del</S>
          <Obj N="takes_args" RefId="6502">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustconfig_mod" RefId="6503">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify global trust configuration.</S>
          <Obj N="takes_options" RefId="6504">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6505">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fallback_primary_group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fallback primary group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantfallbackprimarygroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Fallback primary group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6508">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6509">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6510">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6511">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6512">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6516">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6521">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6523">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6525">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Trust type (ad for Active Directory, default)</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">trust_type</S>
                  <S N="cli_metavar">['ad']</S>
                  <S N="default">ad</S>
                  <Obj N="values" RefId="6526">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ad</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="6527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Trust type (ad for Active Directory, default)</S>
                </MS>
              </Obj>
              <Obj RefId="6529">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6530">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6535">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6536">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6537">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6538">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6540">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6541">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6542">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6544">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustconfig_mod</S>
          <Obj N="takes_args" RefId="6545">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="pkinit_status" RefId="6546">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Report PKINIT status on the IPA masters</S>
          <Obj N="takes_options" RefId="6547">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6548">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">server_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6549">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6551">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">status</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['enabled', 'disabled']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">status</S>
                  <S N="doc">Whether PKINIT is enabled or disabled</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PKINIT status</S>
                  <Obj N="values" RefId="6553">
                    <TNRef RefId="1" />
                    <LST>
                      <S>enabled</S>
                      <S>disabled</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="6554">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6555">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6556">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6558">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6560">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6561">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6562">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6563">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6565">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6567">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6568">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6573">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6574">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6575">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pkinit_status</S>
          <Obj N="takes_args" RefId="6577">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6578">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_find" RefId="6581">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for Sudo Command Groups.</S>
          <Obj N="takes_options" RefId="6582">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6583">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6586">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6589">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6590">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6591">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6592">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6593">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6594">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6595">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6596">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6598">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6601">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6602">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6603">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6604">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6605">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6607">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6611">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6612">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6617">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6618">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("sudocmdgroup-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6619">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6621">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_find</S>
          <Obj N="takes_args" RefId="6622">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6623">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_del" RefId="6626">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a role.</S>
          <Obj N="takes_options" RefId="6627">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6628">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6629">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6630">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6631">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6632">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6633">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6635">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6636">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_del</S>
          <Obj N="takes_args" RefId="6637">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6638">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_disallow_retrieve_keytab" RefId="6641">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disallow users, groups, hosts or host groups to retrieve a keytab of this service.</S>
          <Obj N="takes_options" RefId="6642">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6643">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6644">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6645">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6649">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6650">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6654">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6655">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6659">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6660">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6665">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6668">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6671">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6672">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6674">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6676">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_disallow_retrieve_keytab</S>
          <Obj N="takes_args" RefId="6677">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6678">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_mod" RefId="6681">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a role.</S>
          <Obj N="takes_options" RefId="6682">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6683">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this role-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6687">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6690">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6692">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6694">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6696">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6698">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6699">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6704">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6708">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6709">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6710">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6713">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6714">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6715">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6718">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6719">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6720">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6723">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6724">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6725">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the role object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6726">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_mod</S>
          <Obj N="takes_args" RefId="6728">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6729">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6731">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_find" RefId="6732">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an automount map.</S>
          <Obj N="takes_options" RefId="6733">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6734">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6735">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6737">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6740">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6741">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6742">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6743">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="6745">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6746">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6747">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6748">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6749">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6751">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6752">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6753">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6754">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6758">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6762">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6763">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("map")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6765">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6766">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_find</S>
          <Obj N="takes_args" RefId="6767">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6768">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6769">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6770">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6771">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6772">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topic_show" RefId="6774">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a help topic.</S>
          <Obj N="takes_options" RefId="6775">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6777">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6781">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6782">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6783">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6784">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6787">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6788">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topic_show</S>
          <Obj N="takes_args" RefId="6792">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6793">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">full_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">full_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_remove_principal" RefId="6796">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove principal alias from a host entry</S>
          <Obj N="takes_options" RefId="6797">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6798">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6799">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6801">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6803">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6804">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6805">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6809">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6810">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6811">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6813">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6814">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6815">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6818">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_remove_principal</S>
          <Obj N="takes_args" RefId="6820">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6821">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6824">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbprincipalname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cosentry_show" RefId="6827">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="6828">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6830">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6834">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6835">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6836">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6839">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6840">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6841">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6843">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6844">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6845">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6846">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cosentry_show</S>
          <Obj N="takes_args" RefId="6850">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6851">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;cn&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustconfig_show" RefId="6854">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show global trust configuration.</S>
          <Obj N="takes_options" RefId="6855">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6856">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6857">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6858">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6861">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Trust type (ad for Active Directory, default)</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">trust_type</S>
                  <S N="cli_metavar">['ad']</S>
                  <S N="default">ad</S>
                  <Obj N="values" RefId="6862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ad</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="6863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Trust type (ad for Active Directory, default)</S>
                </MS>
              </Obj>
              <Obj RefId="6865">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6866">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6870">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6871">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6872">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6873">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6877">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6879">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6880">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustconfig_show</S>
          <Obj N="takes_args" RefId="6881">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="vaultcontainer_add_owner" RefId="6882">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add owners to a vault container.</S>
          <Obj N="takes_options" RefId="6883">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6884">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6887">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6888">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="6889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6892">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6893">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6895">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6896">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6897">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6900">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6901">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6902">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6903">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6904">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6906">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6907">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6908">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6911">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6912">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6914">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6917">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6920">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6923">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6925">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vaultcontainer_add_owner</S>
          <Obj N="takes_args" RefId="6926">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="schema" RefId="6927">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="6928">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6929">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">known_fingerprints</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fingerprint of schema cached by client</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">known_fingerprints</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6930">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fingerprint of schema cached by client</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6932">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6933">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6935">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">schema</S>
          <Obj N="takes_args" RefId="6936">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_add" RefId="6937">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Add an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="6938">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6939">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6942">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6944">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6946">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6950">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="6951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="6952">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="6953">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="6954">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6955">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6960">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6961">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6962">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6963">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6965">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6966">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_add</S>
          <Obj N="takes_args" RefId="6970">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6971">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6972">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="6973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_show" RefId="6974">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display an automount map.</S>
          <Obj N="takes_options" RefId="6975">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6976">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="6977">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6982">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6987">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="6988">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="6989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="6990">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="6991">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6992">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="6993">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="6994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="6995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="6996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_show</S>
          <Obj N="takes_args" RefId="6997">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="6998">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="6999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7001">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7002">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_find" RefId="7004">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for SELinux User Maps.</S>
          <Obj N="takes_options" RefId="7005">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7006">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7009">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">selinuxuser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SELinux User</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaselinuxuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">SELinux User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7012">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hbacrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC Rule that defines the users, groups and hostgroups</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">seealso</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7014">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">HBAC Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7015">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="7017">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="7018">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7019">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="7021">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="7022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7023">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7026">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="7027">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7029">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7030">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7031">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7036">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7037">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7038">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7040">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7042">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7043">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7044">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7045">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7047">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7049">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7050">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7051">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7053">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7054">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7056">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7057">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7059">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7060">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7061">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7063">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_find</S>
          <Obj N="takes_args" RefId="7064">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7065">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_find" RefId="7068">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an HBAC service group.</S>
          <Obj N="takes_options" RefId="7069">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7070">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7071">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7072">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7073">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7075">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7076">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7077">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7079">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7081">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7082">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7083">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7085">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7087">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7088">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7089">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7091">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7093">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7094">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7095">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7097">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7098">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7099">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7100">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7101">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7102">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7104">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7105">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7106">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_find</S>
          <Obj N="takes_args" RefId="7109">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7110">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_remove_permission" RefId="7113">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove a permission for per-forward zone access delegation.</S>
          <Obj N="takes_options" RefId="7114">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7115">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7116">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7117">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_remove_permission</S>
          <Obj N="takes_args" RefId="7119">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7120">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7121">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_role_find" RefId="7123">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Find a server role on a server(s)</S>
          <Obj N="takes_options" RefId="7124">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7125">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">server_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7128">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">role</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server role name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">role_servrole</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7131">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">status</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Role status</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">status</S>
                  <S N="cli_metavar">['enabled', 'configured', 'absent']</S>
                  <S N="default">enabled</S>
                  <Obj N="values" RefId="7132">
                    <TNRef RefId="1" />
                    <LST>
                      <S>enabled</S>
                      <S>configured</S>
                      <S>absent</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7134">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <S N="doc">Status of the role</S>
                </MS>
              </Obj>
              <Obj RefId="7135">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7138">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7141">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7142">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7143">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7144">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7146">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7147">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7148">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7149">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7150">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7151">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7152">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7153">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7154">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7156">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_role_find</S>
          <Obj N="takes_args" RefId="7157">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7158">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_add" RefId="7161">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create new DNS forward zone.</S>
          <Obj N="takes_options" RefId="7162">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7163">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7166">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7168">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7169">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="7171">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="7172">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7173">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7177">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7178">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7181">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">skip_overlap_check</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7182">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;skip_overlap_check&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">skip_overlap_check</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force DNS zone creation even if it will overlap with an existing zone.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7183">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7184">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7186">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7187">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7188">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7191">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7192">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7193">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7194">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7195">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7197">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7198">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7201">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_add</S>
          <Obj N="takes_args" RefId="7202">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7203">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_add_member" RefId="7206">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to a group.</S>
          <Obj N="takes_options" RefId="7207">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7208">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">external</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Members of a trusted domain in DOM\name or name@domain form</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaexternalmember</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7209">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External member</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7211">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7212">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7214">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7217">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7218">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7223">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7224">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7225">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7227">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7228">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7231">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7232">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7233">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7236">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_add_member</S>
          <Obj N="takes_args" RefId="7239">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7240">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7241">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="7242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cosentry_del" RefId="7243">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="7244">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7245">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7246">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7247">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7250">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7251">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cosentry_del</S>
          <Obj N="takes_args" RefId="7254">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7255">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;cn&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7256">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_show" RefId="7258">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Retrieve an existing certificate.</S>
          <Obj N="takes_options" RefId="7259">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7260">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ca</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Issuing CA</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cacn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">ipa</S>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7262">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7263">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">out</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Output filename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">out</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">File to store the certificate in.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7267">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">chain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7268">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;chain&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">chain</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include certificate chain in output</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7272">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7273">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7277">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7278">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7279">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7280">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7283">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7284">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7288">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7289">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7291">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_show</S>
          <Obj N="takes_args" RefId="7294">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7295">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial_number</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Serial number</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">serial_number</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Serial number in decimal or if prefixed with 0x in hexadecimal</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="7297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmapconfig_mod" RefId="7298">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Certificate Identity Mapping configuration.</S>
          <Obj N="takes_options" RefId="7299">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7300">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">promptusername</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="7301">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Prompt for the username</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertmappromptusername</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Prompt for the username when multiple identities are mapped to a certificate</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7302">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7305">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7306">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7308">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7309">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7311">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7312">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7313">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7317">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7318">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7319">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7321">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7322">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7323">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7327">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7328">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7329">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7330">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7334">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7335">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7336">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7337">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmapconfig_mod</S>
          <Obj N="takes_args" RefId="7338">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_add_owner" RefId="7339">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add owners to a vault.</S>
          <Obj N="takes_options" RefId="7340">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7341">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7344">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7345">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7346">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7349">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7350">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7352">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7353">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7358">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7359">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7363">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7364">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7368">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7369">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7373">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7374">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7377">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7380">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_add_owner</S>
          <Obj N="takes_args" RefId="7383">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7384">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7385">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="7386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="param_find" RefId="7387">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search command parameters.</S>
          <Obj N="takes_options" RefId="7388">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7389">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7390">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7392">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7394">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7395">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7396">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7398">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7400">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7401">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7403">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7404">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7405">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7406">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7407">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">param_find</S>
          <Obj N="takes_args" RefId="7410">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7411">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">metaobject</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">metaobjectfull_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7414">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_mod" RefId="7417">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a hostgroup.</S>
          <Obj N="takes_options" RefId="7418">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7419">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7420">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7422">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7426">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7430">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7431">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7434">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7435">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7439">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7440">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7441">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7442">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7445">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7446">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7447">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7448">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7451">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7455">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7456">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7458">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_mod</S>
          <Obj N="takes_args" RefId="7461">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7462">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7463">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_add_host" RefId="7465">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add target hosts and hostgroups to an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="7466">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7467">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7468">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7470">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7471">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7473">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7474">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7479">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7481">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7483">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7484">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7485">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7487">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7489">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7490">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7492">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_add_host</S>
          <Obj N="takes_args" RefId="7495">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7496">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_remove_cert" RefId="7499">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove certificates from host entry</S>
          <Obj N="takes_options" RefId="7500">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7501">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7502">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7503">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7504">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7505">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7507">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7508">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7509">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7511">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7513">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7517">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7518">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7520">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7523">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded host certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_remove_cert</S>
          <Obj N="takes_args" RefId="7526">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7527">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7529">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_add_cert" RefId="7530">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add one or more certificates to the stageuser entry</S>
          <Obj N="takes_options" RefId="7531">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7532">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7533">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7536">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7537">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7538">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7539">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7540">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7541">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7544">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7548">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7549">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7550">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7553">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7554">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7556">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_add_cert</S>
          <Obj N="takes_args" RefId="7557">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7558">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="7560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idrange_find" RefId="7561">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for ranges.</S>
          <Obj N="takes_options" RefId="7562">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7563">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Range name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7564">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7565">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Range name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7566">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">base_id</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First Posix ID of the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaseid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First Posix ID of the range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="7568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7569">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">range_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7570">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Number of IDs in the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaidrangesize</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of IDs in the range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="7571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7572">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the corresponding RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the corresponding RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="7574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7575">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">secondary_rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the secondary RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipasecondarybaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the secondary RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="7577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7578">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">dom_sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain SID of the trusted domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain SID of the trusted domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7581">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7582">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['ipa-ad-trust', 'ipa-ad-trust-posix', 'ipa-local']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">iparangetype</S>
                  <S N="doc">ID range type, one of ipa-ad-trust, ipa-ad-trust-posix, ipa-local</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Range type</S>
                  <Obj N="values" RefId="7583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ipa-ad-trust</S>
                      <S>ipa-ad-trust-posix</S>
                      <S>ipa-local</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="7584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7585">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7587">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7588">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7589">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7591">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7592">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7593">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7594">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7597">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7598">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7599">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7602">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7603">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7604">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7605">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7607">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7608">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7609">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7610">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7611">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idrange_find</S>
          <Obj N="takes_args" RefId="7612">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7613">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selfservice_mod" RefId="7616">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a self-service permission.</S>
          <Obj N="takes_options" RefId="7617">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7618">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7621">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the permission applies.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7622">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7624">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7625">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7626">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7627">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7630">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7631">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7633">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7636">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7639">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selfservice_mod</S>
          <Obj N="takes_args" RefId="7640">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7641">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Self-service name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aciname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Self-service name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_find" RefId="7644">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for groups.</S>
          <Obj N="takes_options" RefId="7645">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7646">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="7648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7649">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7650">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7651">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7652">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">GID (use this option to set it manually)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="7654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7655">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7656">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7657">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7658">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7660">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7661">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">private</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7662">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;private&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">private</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">search for private groups</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7663">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7665">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7666">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">posix</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7667">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;posix&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">posix</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">search for POSIX groups</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7668">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7671">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">external</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7672">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;external&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">external</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">search for groups with support of external non-IPA members from trusted domains</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7676">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">nonposix</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7677">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;nonposix&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">nonposix</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">search for non-POSIX groups</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7678">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7681">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7682">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7684">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7687">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7688">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7691">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7692">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7693">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7697">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7698">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7699">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7702">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7704">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("group-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7708">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups with these member users.</S>
                  <Obj N="flags" RefId="7710">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7711">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">no_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups without these member users.</S>
                  <Obj N="flags" RefId="7713">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7714">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups with these member groups.</S>
                  <Obj N="flags" RefId="7716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7717">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">no_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups without these member groups.</S>
                  <Obj N="flags" RefId="7719">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7720">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7721">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups with these member of groups.</S>
                  <Obj N="flags" RefId="7722">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7723">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">not_in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for groups without these member of groups.</S>
                  <Obj N="flags" RefId="7725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="7726">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for groups with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7729">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for groups without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7731">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7732">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups with these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7735">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups without these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7738">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups with these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7741">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups without these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7744">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups with these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7745">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7747">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for groups without these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_find</S>
          <Obj N="takes_args" RefId="7750">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7751">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_add_permission" RefId="7754">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a permission for per-forward zone access delegation.</S>
          <Obj N="takes_options" RefId="7755">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7756">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_add_permission</S>
          <Obj N="takes_args" RefId="7760">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7761">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_show" RefId="7764">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the properties of a SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="7765">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7766">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7767">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7768">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7769">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7770">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7771">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7772">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7777">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7778">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7780">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7782">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7783">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7784">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7786">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7787">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7788">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7790">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7791">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7792">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_show</S>
          <Obj N="takes_args" RefId="7793">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7794">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certprofile_show" RefId="7797">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the properties of a Certificate Profile.</S>
          <Obj N="takes_options" RefId="7798">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7799">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7800">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7801">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7804">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">out</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Write profile configuration to file</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">out</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;out&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7807">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7808">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7809">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7810">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7812">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7819">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7821">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certprofile_show</S>
          <Obj N="takes_args" RefId="7823">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7824">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Profile ID for referring to this profile</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_show" RefId="7827">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display DNS resource.</S>
          <Obj N="takes_options" RefId="7828">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7830">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7834">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">structured</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7835">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Structured</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">structured</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Parse all raw DNS records and return them in a structured way</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7836">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7839">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7840">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7841">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7845">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7846">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7848">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7851">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_show</S>
          <Obj N="takes_args" RefId="7855">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7856">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7859">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7861">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbactest" RefId="7862">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Simulate use of Host-based access controls</S>
          <Obj N="takes_options" RefId="7863">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7864">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7867">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">srchost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Source host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sourcehost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Source host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7870">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">host</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Target host</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targethost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7871">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7873">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7876">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rules to test. If not specified, --enabled is assumed</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rules</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Rules to test. If not specified, --enabled is assumed</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">nodetail</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7880">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Hide details which rules are matched, not matched, or invalid</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">nodetail</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Hide details which rules are matched, not matched, or invalid</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7881">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7882">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7884">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">enabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7885">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Include all enabled IPA rules into test [default]</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">enabled</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include all enabled IPA rules into test [default]</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7889">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7890">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Include all disabled IPA rules into test</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">disabled</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include all disabled IPA rules into test</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7891">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7892">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7893">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7894">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7895">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of rules to process when no --rules is specified</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="7896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7897">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7900">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbactest</S>
          <Obj N="takes_args" RefId="7901">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="passwd" RefId="7902">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Set a user's password.</S>
          <Obj N="takes_options" RefId="7903">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7904">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">otp</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">One Time Password</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">false</B>
                  <B N="query">false</B>
                  <S N="name">otp</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">OTP</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7907">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7908">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">passwd</S>
          <Obj N="takes_args" RefId="7911">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7912">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="7913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User name</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="7914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">User name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7915">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">New Password</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">password</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">New Password</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7918">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">current_password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Current Password</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">false</B>
                  <B N="query">false</B>
                  <S N="name">current_password</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="7919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Current Password</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_add_member" RefId="7921">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to a netgroup.</S>
          <Obj N="takes_options" RefId="7922">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7923">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7924">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7925">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7930">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7931">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7932">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7934">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7935">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7938">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7939">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7940">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7941">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7942">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7943">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7944">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7945">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7947">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7948">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7951">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7953">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7954">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="7957">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">netgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">netgroups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">netgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="7958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="7959">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member netgroup</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_add_member</S>
          <Obj N="takes_args" RefId="7960">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7961">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_enable" RefId="7964">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable DNS Zone.</S>
          <Obj N="takes_options" RefId="7965">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7966">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="7968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_enable</S>
          <Obj N="takes_args" RefId="7970">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7971">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="7972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverridegroup_show" RefId="7974">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an Group ID override.</S>
          <Obj N="takes_options" RefId="7975">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="7976">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7977">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="7982">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="7983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7984">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7986">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7987">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7988">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7992">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="7993">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="7994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="7995">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="7996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="7997">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="7998">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="7999">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8001">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverridegroup_show</S>
          <Obj N="takes_args" RefId="8002">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8003">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8006">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_remove_certmapdata" RefId="8009">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove one or more certificate mappings from the user entry.</S>
          <Obj N="takes_options" RefId="8010">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8011">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuer</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8014">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subject</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8017">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8018">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8019">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8020">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8021">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8023">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8026">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8027">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8032">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8035">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8036">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8037">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8038">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8041">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_remove_certmapdata</S>
          <Obj N="takes_args" RefId="8042">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8043">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="8045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="8046">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">certmapdata</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate mapping data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapdata</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8047">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate mapping data</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_del" RefId="8049">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete DNS zone (SOA record).</S>
          <Obj N="takes_options" RefId="8050">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8052">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8059">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_del</S>
          <Obj N="takes_args" RefId="8060">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8061">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8063">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="class_find" RefId="8064">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for classes.</S>
          <Obj N="takes_options" RefId="8065">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8066">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8067">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8072">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8073">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8075">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8076">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8078">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8079">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8081">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8082">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8083">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">class_find</S>
          <Obj N="takes_args" RefId="8087">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8088">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8090">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_mod" RefId="8091">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a DNS resource record.</S>
          <Obj N="takes_options" RefId="8092">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8093">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="8095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8096">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="8098">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="8099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8100">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">ARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">arecord</S>
                  <S N="cli_metavar">ARECORD</S>
                  <S N="doc">Raw A records</S>
                  <S N="option_group">A Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8101">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8102">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8103">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a_ip_address</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A IP Address</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">a_part_ip_address</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">A IP Address</S>
                  <S N="option_group">A Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8106">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">aaaa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AAAARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaarecord</S>
                  <S N="cli_metavar">AAAARECORD</S>
                  <S N="doc">Raw AAAA records</S>
                  <S N="option_group">AAAA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8109">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">aaaa_ip_address</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA IP Address</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaa_part_ip_address</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">AAAA IP Address</S>
                  <S N="option_group">AAAA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8112">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a6_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">A6Record</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6record</S>
                  <S N="cli_metavar">A6RECORD</S>
                  <S N="doc">Raw A6 records</S>
                  <S N="option_group">A6 Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8115">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a6_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 Record data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6_part_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">A6 Record data</S>
                  <S N="option_group">A6 Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8117">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8118">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AFSDB record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AFSDBRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdbrecord</S>
                  <S N="cli_metavar">AFSDBRECORD</S>
                  <S N="doc">Raw AFSDB records</S>
                  <S N="option_group">AFSDB Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8121">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_subtype</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">AFSDB Subtype</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdb_part_subtype</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">AFSDB Subtype</S>
                  <S N="option_group">AFSDB Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8124">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">AFSDB Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8125">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdb_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">AFSDB Hostname</S>
                  <S N="option_group">AFSDB Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8127">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">apl_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">APL record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">APLRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aplrecord</S>
                  <S N="cli_metavar">APLRECORD</S>
                  <S N="doc">Raw APL records</S>
                  <S N="option_group">APL Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8128">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8130">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CERTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">certrecord</S>
                  <S N="cli_metavar">CERTRECORD</S>
                  <S N="doc">Raw CERT records</S>
                  <S N="option_group">CERT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8133">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Certificate Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Certificate Type</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8136">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Key Tag</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8138">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8139">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Algorithm</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8141">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8142">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_certificate_or_crl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT Certificate/CRL</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_certificate_or_crl</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">CERT Certificate/CRL</S>
                  <S N="option_group">CERT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8144">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8145">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">cnamerecord</S>
                  <S N="cli_metavar">CNAMERECORD</S>
                  <S N="doc">Raw CNAME records</S>
                  <S N="option_group">CNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8147">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8148">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cname_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CNAME Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8149">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">cname_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A hostname which this alias hostname points to</S>
                  <S N="option_group">CNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8150">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8151">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dhcid_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DHCID record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DHCIDRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dhcidrecord</S>
                  <S N="cli_metavar">DHCIDRECORD</S>
                  <S N="doc">Raw DHCID records</S>
                  <S N="option_group">DHCID Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8154">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DLVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlvrecord</S>
                  <S N="cli_metavar">DLVRECORD</S>
                  <S N="doc">Raw DLV records</S>
                  <S N="option_group">DLV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8157">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8158">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Key Tag</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8159">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8160">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Algorithm</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8162">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8163">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_digest_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Digest Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_digest_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Digest Type</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8165">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8166">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">only hexadecimal digits are allowed</S>
                  <S N="cli_name">dlv_digest</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[0-9a-fA-F]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV Digest</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_digest</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">DLV Digest</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="option_group">DLV Record</S>
                  <Obj N="flags" RefId="8168">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8169">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnamerecord</S>
                  <S N="cli_metavar">DNAMERECORD</S>
                  <S N="doc">Raw DNAME records</S>
                  <S N="option_group">DNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8172">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dname_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DNAME Target</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8173">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dname_part_target</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">DNAME Target</S>
                  <S N="option_group">DNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8175">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dsrecord</S>
                  <S N="cli_metavar">DSRECORD</S>
                  <S N="doc">Raw DS records</S>
                  <S N="option_group">DS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8178">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Key Tag</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8180">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8181">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Algorithm</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8183">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8184">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_digest_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Digest Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_digest_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Digest Type</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8186">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8187">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">only hexadecimal digits are allowed</S>
                  <S N="cli_name">ds_digest</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[0-9a-fA-F]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS Digest</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_digest</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">DS Digest</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="option_group">DS Record</S>
                  <Obj N="flags" RefId="8189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8190">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">hip_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">HIP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">HIPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">hiprecord</S>
                  <S N="cli_metavar">HIPRECORD</S>
                  <S N="doc">Raw HIP records</S>
                  <S N="option_group">HIP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8192">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8193">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ipseckey_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">IPSECKEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IPSECKEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipseckeyrecord</S>
                  <S N="cli_metavar">IPSECKEYRECORD</S>
                  <S N="doc">Raw IPSECKEY records</S>
                  <S N="option_group">IPSECKEY Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8194">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8195">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8196">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">key_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">keyrecord</S>
                  <S N="cli_metavar">KEYRECORD</S>
                  <S N="doc">Raw KEY records</S>
                  <S N="option_group">KEY Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8198">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8199">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">kxrecord</S>
                  <S N="cli_metavar">KXRECORD</S>
                  <S N="doc">Raw KX records</S>
                  <S N="option_group">KX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8202">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">KX Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">kx_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Preference given to this exchanger. Lower values are more preferred</S>
                  <S N="option_group">KX Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8204">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8205">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_exchanger</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">KX Exchanger</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8206">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">kx_part_exchanger</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A host willing to act as a key exchanger</S>
                  <S N="option_group">KX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8208">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">LOC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">LOCRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">locrecord</S>
                  <S N="cli_metavar">LOCRECORD</S>
                  <S N="doc">Raw LOC records</S>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8211">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_deg</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Degrees Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_deg</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Degrees Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">90</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8214">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_min</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Minutes Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_min</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Minutes Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">59</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8217">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_sec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Seconds Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_lat_sec</S>
                  <I32 N="precision">3</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Seconds Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">59.999</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="8219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8221">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_dir</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">LOC Direction Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_dir</S>
                  <S N="cli_metavar">['N', 'S']</S>
                  <Obj N="values" RefId="8222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>N</S>
                      <S>S</S>
                    </LST>
                  </Obj>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8223">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8224">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">LOC Direction Latitude</S>
                </MS>
              </Obj>
              <Obj RefId="8225">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_deg</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8226">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Degrees Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_deg</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Degrees Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">180</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8227">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8228">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_min</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8229">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Minutes Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_min</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Minutes Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">59</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8231">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_sec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8232">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Seconds Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_lon_sec</S>
                  <I32 N="precision">3</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Seconds Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">59.999</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="8233">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8234">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8235">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_dir</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">LOC Direction Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_dir</S>
                  <S N="cli_metavar">['E', 'W']</S>
                  <Obj N="values" RefId="8236">
                    <TNRef RefId="1" />
                    <LST>
                      <S>E</S>
                      <S>W</S>
                    </LST>
                  </Obj>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8238">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">LOC Direction Longitude</S>
                </MS>
              </Obj>
              <Obj RefId="8239">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_altitude</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Altitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_altitude</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Altitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">42849672.95</S>
                  <S N="minvalue">-100000.00</S>
                  <Obj N="numberclass" RefId="8241">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8243">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Size</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_size</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Size</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="8245">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8246">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8247">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_h_precision</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Horizontal Precision</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_h_precision</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Horizontal Precision</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="8249">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8250">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8251">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_v_precision</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Vertical Precision</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_v_precision</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Vertical Precision</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="8253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="8254">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8255">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">MXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">mxrecord</S>
                  <S N="cli_metavar">MXRECORD</S>
                  <S N="doc">Raw MX records</S>
                  <S N="option_group">MX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8256">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8258">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">MX Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">mx_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Preference given to this exchanger. Lower values are more preferred</S>
                  <S N="option_group">MX Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8260">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8261">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_exchanger</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">MX Exchanger</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8262">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">mx_part_exchanger</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A host willing to act as a mail exchanger</S>
                  <S N="option_group">MX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8264">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NAPTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptrrecord</S>
                  <S N="cli_metavar">NAPTRRECORD</S>
                  <S N="doc">Raw NAPTR records</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8267">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_order</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8268">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NAPTR Order</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_order</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">NAPTR Order</S>
                  <S N="option_group">NAPTR Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8270">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NAPTR Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">NAPTR Preference</S>
                  <S N="option_group">NAPTR Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8272">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8273">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_flags</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Flags</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_flags</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Flags</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8276">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_service</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Service</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_service</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Service</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8278">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8279">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_regexp</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Regular Expression</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_regexp</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Regular Expression</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8282">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_replacement</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Replacement</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_replacement</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Replacement</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8284">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8285">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ns_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsrecord</S>
                  <S N="cli_metavar">NSRECORD</S>
                  <S N="doc">Raw NS records</S>
                  <S N="option_group">NS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8288">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ns_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NS Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8289">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">ns_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">NS Hostname</S>
                  <S N="option_group">NS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8290">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8291">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">nsec_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSECRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsecrecord</S>
                  <S N="cli_metavar">NSECRECORD</S>
                  <S N="doc">Raw NSEC records</S>
                  <S N="option_group">NSEC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8294">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">PTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">PTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptrrecord</S>
                  <S N="cli_metavar">PTRRECORD</S>
                  <S N="doc">Raw PTR records</S>
                  <S N="option_group">PTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8297">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ptr_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PTR Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8298">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptr_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">The hostname this reverse record points to</S>
                  <S N="option_group">PTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8300">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">rrsig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RRSIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RRSIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rrsigrecord</S>
                  <S N="cli_metavar">RRSIGRECORD</S>
                  <S N="doc">Raw RRSIG records</S>
                  <S N="option_group">RRSIG Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8302">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8303">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">rp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rprecord</S>
                  <S N="cli_metavar">RPRECORD</S>
                  <S N="doc">Raw RP records</S>
                  <S N="option_group">RP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8304">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8305">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8306">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sigrecord</S>
                  <S N="cli_metavar">SIGRECORD</S>
                  <S N="doc">Raw SIG records</S>
                  <S N="option_group">SIG Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8309">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">spf_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SPF record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SPFRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">spfrecord</S>
                  <S N="cli_metavar">SPFRECORD</S>
                  <S N="doc">Raw SPF records</S>
                  <S N="option_group">SPF Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8311">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8312">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SRV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SRVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">srvrecord</S>
                  <S N="cli_metavar">SRVRECORD</S>
                  <S N="doc">Raw SRV records</S>
                  <S N="option_group">SRV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8315">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Priority (order)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_priority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Lower number means higher priority. Clients will attempt to contact the server with the lowest-numbered priority they can reach.</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8317">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8318">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_weight</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Weight</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_weight</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Relative weight for entries with the same priority.</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8321">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_port</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Port</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_port</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SRV Port</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8324">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Target</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="8325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_target</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">The domain name of the target host or '.' if the service is decidedly not available at this domain</S>
                  <S N="option_group">SRV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8327">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SSHFPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfprecord</S>
                  <S N="cli_metavar">SSHFPRECORD</S>
                  <S N="doc">Raw SSHFP records</S>
                  <S N="option_group">SSHFP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8329">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8330">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SSHFP Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SSHFP Algorithm</S>
                  <S N="option_group">SSHFP Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8332">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8333">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_fp_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SSHFP Fingerprint Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_fp_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SSHFP Fingerprint Type</S>
                  <S N="option_group">SSHFP Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8335">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8336">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_fingerprint</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP Fingerprint</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_fingerprint</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">SSHFP Fingerprint</S>
                  <S N="option_group">SSHFP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8338">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8339">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TLSARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsarecord</S>
                  <S N="cli_metavar">TLSARECORD</S>
                  <S N="doc">Raw TLSA records</S>
                  <S N="option_group">TLSA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8340">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8341">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8342">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_cert_usage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Certificate Usage</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_cert_usage</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Certificate Usage</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8345">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_selector</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Selector</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_selector</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Selector</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8347">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8348">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_matching_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Matching Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_matching_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Matching Type</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8350">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8351">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_cert_association_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA Certificate Association Data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_cert_association_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">TLSA Certificate Association Data</S>
                  <S N="option_group">TLSA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8352">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8353">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8354">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">txt_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TXTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">txtrecord</S>
                  <S N="cli_metavar">TXTRECORD</S>
                  <S N="doc">Raw TXT records</S>
                  <S N="option_group">TXT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8357">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">txt_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT Text Data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">txt_part_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">TXT Text Data</S>
                  <S N="option_group">TXT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8358">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8360">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">URIRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">urirecord</S>
                  <S N="cli_metavar">URIRECORD</S>
                  <S N="doc">Raw URI records</S>
                  <S N="option_group">URI Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8363">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8364">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">URI Priority (order)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_priority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Lower number means higher priority. Clients will attempt to contact the URI with the lowest-numbered priority they can reach.</S>
                  <S N="option_group">URI Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8366">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_weight</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">URI Weight</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_weight</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Relative weight for entries with the same priority.</S>
                  <S N="option_group">URI Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8369">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <I32 N="minlength">1</I32>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI Target Uniform Resource Identifier</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_target</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Target Uniform Resource Identifier according to RFC 3986</S>
                  <S N="option_group">URI Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="8370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8372">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8373">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8376">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8377">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8380">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8381">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8384">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8385">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8389">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">structured</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8390">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Structured</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">structured</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Parse all raw DNS records and return them in a structured way</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8394">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8395">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8401">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8405">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8406">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8407">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8409">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8410">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Rename</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Rename the DNS resource record object</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8412">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_mod</S>
          <Obj N="takes_args" RefId="8413">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8414">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8417">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_remove_permission" RefId="8420">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove permissions from a privilege.</S>
          <Obj N="takes_options" RefId="8421">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8422">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8423">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8425">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8426">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8428">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8429">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8430">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8431">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8434">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8435">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8437">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8438">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8439">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8440">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8441">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8443">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8444">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">permissions</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_remove_permission</S>
          <Obj N="takes_args" RefId="8447">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8448">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vaultcontainer_show" RefId="8451">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a vault container.</S>
          <Obj N="takes_options" RefId="8452">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8453">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8454">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8455">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8456">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8457">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8458">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8460">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8461">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8462">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8465">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8466">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8468">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8469">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8470">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8474">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8475">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8476">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8477">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8481">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8485">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8486">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8487">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vaultcontainer_show</S>
          <Obj N="takes_args" RefId="8491">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_remove_cert" RefId="8492">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove certificates from a service</S>
          <Obj N="takes_options" RefId="8493">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8494">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8495">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8496">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8497">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8500">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8501">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8502">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8503">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8504">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8505">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8506">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8508">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8509">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8510">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8511">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8515">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8516">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8517">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded service certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_remove_cert</S>
          <Obj N="takes_args" RefId="8519">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8520">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8522">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_option" RefId="8523">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add an option to the Sudo Rule.</S>
          <Obj N="takes_options" RefId="8524">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8525">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudooption</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Option</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudoopt</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8526">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Option</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8528">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8529">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8530">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8532">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8534">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8535">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8537">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8538">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8539">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8540">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8541">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8544">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8545">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8548">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_option</S>
          <Obj N="takes_args" RefId="8550">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8551">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8553">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certprofile_find" RefId="8554">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for Certificate Profiles.</S>
          <Obj N="takes_options" RefId="8555">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8556">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Profile ID for referring to this profile</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8559">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Brief description of this profile</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8562">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">store</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="8563">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Store issued certificates</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertprofilestoreissued</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">true</B>
                  <S N="doc">Whether to store certs issued using this profile</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8565">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8567">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8570">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8573">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8574">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8575">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8578">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8579">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8580">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8581">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8583">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8585">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8586">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8588">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8589">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8590">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("id")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8591">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8593">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certprofile_find</S>
          <Obj N="takes_args" RefId="8594">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8595">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8596">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_find" RefId="8598">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for vaults.</S>
          <Obj N="takes_options" RefId="8599">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8600">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="8602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="8603">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8604">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8605">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8606">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipavaulttype</S>
                  <S N="cli_metavar">['standard', 'symmetric', 'asymmetric']</S>
                  <S N="default">symmetric</S>
                  <Obj N="values" RefId="8607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>standard</S>
                      <S>symmetric</S>
                      <S>asymmetric</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault type</S>
                </MS>
              </Obj>
              <Obj RefId="8610">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8611">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8613">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8615">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8616">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8617">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8619">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8620">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8621">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8624">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8626">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8627">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">services</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8628">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;services&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">services</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">List all service vaults</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8631">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8632">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8633">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;users&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">users</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">List all user vaults</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8635">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8636">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8637">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8638">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8639">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8641">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8642">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8643">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8644">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8645">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8649">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8651">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8653">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8654">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8655">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8659">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8660">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8662">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_find</S>
          <Obj N="takes_args" RefId="8664">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8665">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="session_logout" RefId="8668">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ RPC command used to log the current user out of their session._x000A_ </S>
          <Obj N="takes_options" RefId="8669">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8670">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8671">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8672">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">session_logout</S>
          <Obj N="takes_args" RefId="8674">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_revoke" RefId="8675">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Revoke a certificate.</S>
          <Obj N="takes_options" RefId="8676">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8677">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">revocation_reason</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Revocation reason</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">revocation_reason</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">Reason for revoking the certificate (0-10). Type "ipa help cert" for revocation reason details. </S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">10</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8679">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8680">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ca</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Issuing CA</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cacn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">ipa</S>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8683">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8684">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_revoke</S>
          <Obj N="takes_args" RefId="8687">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8688">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial_number</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Serial number</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">serial_number</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Serial number in decimal or if prefixed with 0x in hexadecimal</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="8690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_allow_retrieve_keytab" RefId="8691">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Allow users, groups, hosts or host groups to retrieve a keytab of this host.</S>
          <Obj N="takes_options" RefId="8692">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8693">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8694">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8698">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8699">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8700">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8702">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8704">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8705">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8708">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8709">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8710">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8713">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8714">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8715">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8718">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8719">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8720">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8721">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8722">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8723">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8724">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8726">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_allow_retrieve_keytab</S>
          <Obj N="takes_args" RefId="8727">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8728">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_show" RefId="8731">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a role.</S>
          <Obj N="takes_options" RefId="8732">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8733">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8734">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8738">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8739">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8740">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8741">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8743">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8744">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8745">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8746">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8747">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8749">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8750">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8751">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8753">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8755">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8757">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_show</S>
          <Obj N="takes_args" RefId="8760">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8761">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_find" RefId="8764">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for DNS resources.</S>
          <Obj N="takes_options" RefId="8765">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8766">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8768">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8769">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8770">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="8771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8772">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="8774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="8775">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">a_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">ARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">arecord</S>
                  <S N="cli_metavar">ARECORD</S>
                  <S N="doc">Raw A records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8777">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8778">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8779">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">aaaa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AAAARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaarecord</S>
                  <S N="cli_metavar">AAAARECORD</S>
                  <S N="doc">Raw AAAA records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8782">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">a6_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">A6Record</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6record</S>
                  <S N="cli_metavar">A6RECORD</S>
                  <S N="doc">Raw A6 records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8783">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8785">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">afsdb_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AFSDB record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AFSDBRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdbrecord</S>
                  <S N="cli_metavar">AFSDBRECORD</S>
                  <S N="doc">Raw AFSDB records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8787">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8788">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">apl_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">APL record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">APLRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aplrecord</S>
                  <S N="cli_metavar">APLRECORD</S>
                  <S N="doc">Raw APL records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8790">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8791">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cert_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CERTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">certrecord</S>
                  <S N="cli_metavar">CERTRECORD</S>
                  <S N="doc">Raw CERT records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8792">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8794">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">cnamerecord</S>
                  <S N="cli_metavar">CNAMERECORD</S>
                  <S N="doc">Raw CNAME records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8797">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dhcid_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DHCID record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DHCIDRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dhcidrecord</S>
                  <S N="cli_metavar">DHCIDRECORD</S>
                  <S N="doc">Raw DHCID records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8798">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8799">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8800">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dlv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DLVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlvrecord</S>
                  <S N="cli_metavar">DLVRECORD</S>
                  <S N="doc">Raw DLV records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8803">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnamerecord</S>
                  <S N="cli_metavar">DNAMERECORD</S>
                  <S N="doc">Raw DNAME records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8806">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ds_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dsrecord</S>
                  <S N="cli_metavar">DSRECORD</S>
                  <S N="doc">Raw DS records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8809">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">hip_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">HIP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">HIPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">hiprecord</S>
                  <S N="cli_metavar">HIPRECORD</S>
                  <S N="doc">Raw HIP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8811">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8812">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipseckey_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">IPSECKEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IPSECKEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipseckeyrecord</S>
                  <S N="cli_metavar">IPSECKEYRECORD</S>
                  <S N="doc">Raw IPSECKEY records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8814">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8815">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">key_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">keyrecord</S>
                  <S N="cli_metavar">KEYRECORD</S>
                  <S N="doc">Raw KEY records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8818">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">kx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">kxrecord</S>
                  <S N="cli_metavar">KXRECORD</S>
                  <S N="doc">Raw KX records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8819">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8820">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8821">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">loc_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">LOC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">LOCRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">locrecord</S>
                  <S N="cli_metavar">LOCRECORD</S>
                  <S N="doc">Raw LOC records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8824">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">mx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">MXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">mxrecord</S>
                  <S N="cli_metavar">MXRECORD</S>
                  <S N="doc">Raw MX records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8827">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">naptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NAPTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptrrecord</S>
                  <S N="cli_metavar">NAPTRRECORD</S>
                  <S N="doc">Raw NAPTR records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8829">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8830">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ns_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsrecord</S>
                  <S N="cli_metavar">NSRECORD</S>
                  <S N="doc">Raw NS records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8831">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8833">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">nsec_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSECRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsecrecord</S>
                  <S N="cli_metavar">NSECRECORD</S>
                  <S N="doc">Raw NSEC records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8835">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8836">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">PTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">PTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptrrecord</S>
                  <S N="cli_metavar">PTRRECORD</S>
                  <S N="doc">Raw PTR records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8839">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rrsig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RRSIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RRSIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rrsigrecord</S>
                  <S N="cli_metavar">RRSIGRECORD</S>
                  <S N="doc">Raw RRSIG records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8840">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8841">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8842">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rprecord</S>
                  <S N="cli_metavar">RPRECORD</S>
                  <S N="doc">Raw RP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8845">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sigrecord</S>
                  <S N="cli_metavar">SIGRECORD</S>
                  <S N="doc">Raw SIG records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8848">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">spf_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SPF record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SPFRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">spfrecord</S>
                  <S N="cli_metavar">SPFRECORD</S>
                  <S N="doc">Raw SPF records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8851">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">srv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SRV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SRVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">srvrecord</S>
                  <S N="cli_metavar">SRVRECORD</S>
                  <S N="doc">Raw SRV records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8854">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sshfp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SSHFPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfprecord</S>
                  <S N="cli_metavar">SSHFPRECORD</S>
                  <S N="doc">Raw SSHFP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8857">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">tlsa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TLSARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsarecord</S>
                  <S N="cli_metavar">TLSARECORD</S>
                  <S N="doc">Raw TLSA records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8860">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">txt_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TXTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">txtrecord</S>
                  <S N="cli_metavar">TXTRECORD</S>
                  <S N="doc">Raw TXT records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8861">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8862">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8863">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uri_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">URIRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">urirecord</S>
                  <S N="cli_metavar">URIRECORD</S>
                  <S N="doc">Raw URI records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="8865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8866">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8869">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="8871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8872">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">structured</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8873">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Structured</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">structured</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Parse all raw DNS records and return them in a structured way</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8876">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8877">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8878">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8880">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8881">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8883">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8884">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8888">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8889">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8890">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8893">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8894">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="8895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_find</S>
          <Obj N="takes_args" RefId="8898">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8899">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8900">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8902">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_remove_principal" RefId="8905">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove principal alias from a service</S>
          <Obj N="takes_options" RefId="8906">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8907">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8908">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8909">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8912">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8913">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8914">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8915">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8918">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8919">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8923">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8924">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8925">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_remove_principal</S>
          <Obj N="takes_args" RefId="8929">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8930">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="8933">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="8934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Service principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8935">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_status" RefId="8936">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Lockout status of a user account_x000A__x000A_ An account may become locked if the password is entered incorrectly too_x000A_ many times within a specific time period as controlled by password_x000A_ policy. A locked account is a temporary condition and may be unlocked by_x000A_ an administrator._x000A__x000A_ This connects to each IPA master and displays the lockout status on_x000A_ each one._x000A__x000A_ To determine whether an account is locked on a given server you need_x000A_ to compare the number of failed logins and the time of the last failure._x000A_ For an account to be locked it must exceed the maxfail failures within_x000A_ the failinterval duration as specified in the password policy associated_x000A_ with the user._x000A__x000A_ The failed login counter is modified only when a user attempts a log in_x000A_ so it is possible that an account may appear locked but the last failed_x000A_ login attempt is older than the lockouttime of the password policy. This_x000A_ means that the user may attempt a login again. </S>
          <Obj N="takes_options" RefId="8937">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8938">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8939">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8940">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8941">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8945">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8950">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_status</S>
          <Obj N="takes_args" RefId="8954">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8955">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">useruid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="8957">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_show" RefId="8958">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a netgroup.</S>
          <Obj N="takes_options" RefId="8959">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8960">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="8961">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8962">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8965">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8966">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8968">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8969">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8970">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8971">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8972">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8974">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8975">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8976">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8977">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="8978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="8981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="8982">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="8983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="8984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="8985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_show</S>
          <Obj N="takes_args" RefId="8987">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8988">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="8989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_add" RefId="8991">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new OTP token.</S>
          <Obj N="takes_options" RefId="8992">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="8993">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">type</S>
                  <S N="cli_metavar">['totp', 'hotp', 'TOTP', 'HOTP']</S>
                  <S N="default">totp</S>
                  <Obj N="values" RefId="8994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>totp</S>
                      <S>hotp</S>
                      <S>TOTP</S>
                      <S>HOTP</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="8995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="8996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">Type of the token</S>
                </MS>
              </Obj>
              <Obj RefId="8997">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token description (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="8998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="8999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9000">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">owner</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned user of the token (default: self)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenowner</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9001">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9002">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Owner</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9003">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="9004">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokendisabled</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Mark the token as disabled (default: false)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9005">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9006">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9008">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9009">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_before</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokennotbefore</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity start</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9011">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_after</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokennotafter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity end</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9014">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">vendor</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token vendor name (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenvendor</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Vendor</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9017">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">model</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token model (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenmodel</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9018">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9019">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Model</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9020">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">serial</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token serial (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenserial</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Serial</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9023">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">OTPTOKENKEY</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token secret (Base32; default: random)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenotpkey</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="9025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                      <S>no_update</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">str</S>
                  <S N="class">OTPTokenKey</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9026">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">algo</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenotpalgorithm</S>
                  <S N="cli_metavar">['sha1', 'sha256', 'sha384', 'sha512']</S>
                  <S N="default">sha1</S>
                  <Obj N="values" RefId="9027">
                    <TNRef RefId="1" />
                    <LST>
                      <S>sha1</S>
                      <S>sha256</S>
                      <S>sha384</S>
                      <S>sha512</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Token hash algorithm</S>
                </MS>
              </Obj>
              <Obj RefId="9030">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">digits</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Digits</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IntEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenotpdigits</S>
                  <S N="cli_metavar">['6', '8']</S>
                  <I32 N="default">6</I32>
                  <Obj N="values" RefId="9031">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>6</I32>
                      <I32>8</I32>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Number of digits each token code will have</S>
                </MS>
              </Obj>
              <Obj RefId="9034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">offset</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Clock offset</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotpclockoffset</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">TOTP token / FreeIPA server time difference</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="9036">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9037">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">interval</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Clock interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotptimestep</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">30</I32>
                  <S N="doc">Length of TOTP token code validity</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">5</I32>
                  <Obj N="flags" RefId="9039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9040">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">counter</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Counter</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenhotpcounter</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">Initial counter for the HOTP token</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9042">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9043">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9044">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9046">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">qrcode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9052">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">(deprecated)</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">qrcode</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">(deprecated)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_qrcode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9057">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Do not display QR code</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_qrcode</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Do not display QR code</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9060">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9061">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9062">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9063">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9064">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9065">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9066">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9067">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9068">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9070">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9071">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9073">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9075">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9076">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9077">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9078">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9079">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9080">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9081">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9082">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_add</S>
          <Obj N="takes_args" RefId="9083">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9084">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9085">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_del" RefId="9087">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Delete ACI._x000A_ </S>
          <Obj N="takes_options" RefId="9088">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9089">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9090">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="9091">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="9092">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9093">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9094">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9096">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_del</S>
          <Obj N="takes_args" RefId="9097">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9098">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_add" RefId="9101">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Create new ACI._x000A_ </S>
          <Obj N="takes_options" RefId="9102">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9103">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permission</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permission ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9104">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9106">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9107">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9109">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant(read, write, add, delete, all)</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9110">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9112">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9113">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes to which the permission applies</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9115">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['user', 'group', 'host', 'service', 'hostgroup', 'netgroup', 'dnsrecord']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">type of IPA object (user, group, host, hostgroup, service, netgroup)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Type</S>
                  <Obj N="values" RefId="9117">
                    <TNRef RefId="1" />
                    <LST>
                      <S>user</S>
                      <S>group</S>
                      <S>host</S>
                      <S>service</S>
                      <S>hostgroup</S>
                      <S>netgroup</S>
                      <S>dnsrecord</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="9118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9119">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Member of a group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9120">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9121">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member of</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9122">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Legal LDAP filter (e.g. ou=Engineering)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9125">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9126">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9128">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9131">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">self</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9132">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Target your own entry (self)</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">selfaci</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Apply ACI to your own entry (self)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9133">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9136">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="9138">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="9139">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9140">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">test</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9141">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;test&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">test</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Test the ACI syntax but don't write anything</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9142">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9146">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9148">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9150">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9151">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9152">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9154">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9156">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9157">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9158">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_add</S>
          <Obj N="takes_args" RefId="9161">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9162">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9163">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vaultcontainer_remove_owner" RefId="9165">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove owners from a vault container.</S>
          <Obj N="takes_options" RefId="9166">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9167">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9168">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9170">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9171">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9175">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9178">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9179">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9180">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9181">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9183">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9184">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9185">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9186">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9187">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9190">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9191">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9193">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9194">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9195">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9197">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9200">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9202">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9203">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9206">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vaultcontainer_remove_owner</S>
          <Obj N="takes_args" RefId="9209">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_deny_command" RefId="9210">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove commands and sudo command groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="9211">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9212">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9213">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9214">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9215">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9216">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9217">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9218">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9219">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9224">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9226">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9227">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9228">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9229">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9231">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9232">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9233">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9234">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9237">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmdgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo command groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmdgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9239">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_deny_command</S>
          <Obj N="takes_args" RefId="9240">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9241">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9243">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_mod" RefId="9244">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify CA configuration.</S>
          <Obj N="takes_options" RefId="9245">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9246">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description of the purpose of the CA</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9249">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9250">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9253">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9254">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9256">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9257">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9261">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9262">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9263">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9266">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9267">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9268">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9271">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9272">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9273">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9277">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9278">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9279">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9281">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9282">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the Certificate Authority object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_mod</S>
          <Obj N="takes_args" RefId="9285">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9286">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountlocation_del" RefId="9289">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an automount location.</S>
          <Obj N="takes_options" RefId="9290">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9291">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9292">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9296">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9299">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountlocation_del</S>
          <Obj N="takes_args" RefId="9300">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9301">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add_ca" RefId="9304">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add CAs to a CA ACL.</S>
          <Obj N="takes_options" RefId="9305">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9306">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9307">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9309">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9311">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9312">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9313">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9315">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9317">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9318">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9319">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9321">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9322">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9323">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9327">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9328">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">cas</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Certificate Authorities to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ca</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9329">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member Certificate Authority</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add_ca</S>
          <Obj N="takes_args" RefId="9331">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9332">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9333">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_retrieve_internal" RefId="9335">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="9336">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9337">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9339">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9340">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9341">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9344">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9345">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9348">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">session_key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Session key wrapped with transport certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">session_key</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9350">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;session_key&gt;</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9351">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9352">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9353">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9356">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9357">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9358">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9363">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9364">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9365">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_retrieve_internal</S>
          <Obj N="takes_args" RefId="9367">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9368">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9369">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="9370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_find" RefId="9371">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for HBAC rules.</S>
          <Obj N="takes_options" RefId="9372">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9373">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9376">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9377">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rule type</S>
                  <Obj N="values" RefId="9378">
                    <TNRef RefId="1" />
                    <LST>
                      <S>allow</S>
                      <S>deny</S>
                    </LST>
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">accessruletype</S>
                  <S N="cli_metavar">['allow', 'deny']</S>
                  <S N="default">allow</S>
                  <S N="doc">Rule type (allow)</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9380">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9381">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="9383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9385">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="9387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9389">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">srchostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">sourcehostcategory</S>
                  <S N="doc">Source host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Source host category</S>
                  <Obj N="values" RefId="9391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9392">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9393">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="9395">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9397">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="9401">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9403">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9404">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9405">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9406">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9408">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9410">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9411">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9412">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9413">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9414">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9415">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9417">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9419">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9420">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9421">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9422">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9425">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9426">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9429">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9430">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9431">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9432">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9434">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9435">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9436">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9437">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9438">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_find</S>
          <Obj N="takes_args" RefId="9441">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9442">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9444">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsserver_find" RefId="9445">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for DNS servers.</S>
          <Obj N="takes_options" RefId="9446">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9447">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">DNS Server name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsserverid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9448">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9450">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">soa_mname_override</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA mname override</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoamname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">SOA mname (authoritative server) override</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9451">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9453">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-server forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9454">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9456">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9457">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-server conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="9458">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9460">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9461">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9463">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9466">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9467">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9468">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9472">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9473">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9474">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9477">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9478">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9480">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9481">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9482">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9483">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("hostname")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9486">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsserver_find</S>
          <Obj N="takes_args" RefId="9487">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9488">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9490">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_remove_owner" RefId="9491">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove owners from a vault.</S>
          <Obj N="takes_options" RefId="9492">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9493">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9496">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9497">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9498">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9499">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9501">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9504">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9505">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9508">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9509">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9510">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9511">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9515">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9516">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9521">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9525">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9526">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9529">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9530">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9532">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">owner service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_remove_owner</S>
          <Obj N="takes_args" RefId="9535">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9536">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="9538">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_remove_hold" RefId="9539">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Take a revoked certificate off hold.</S>
          <Obj N="takes_options" RefId="9540">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9541">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ca</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Issuing CA</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cacn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">ipa</S>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9544">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_remove_hold</S>
          <Obj N="takes_args" RefId="9548">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9549">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial_number</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Serial number</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">serial_number</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Serial number in decimal or if prefixed with 0x in hexadecimal</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="9551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountlocation_find" RefId="9552">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an automount location.</S>
          <Obj N="takes_options" RefId="9553">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9554">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9556">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9557">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9559">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9560">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="9562">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9563">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9564">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9565">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9569">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9570">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9571">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9574">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9575">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9578">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9579">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9580">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("location")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9581">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9582">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9583">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountlocation_find</S>
          <Obj N="takes_args" RefId="9584">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9585">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_del" RefId="9588">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a SELinux User Map.</S>
          <Obj N="takes_options" RefId="9589">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9590">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9591">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9593">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9595">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9598">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_del</S>
          <Obj N="takes_args" RefId="9599">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9600">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_show" RefId="9603">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a named service delegation target.</S>
          <Obj N="takes_options" RefId="9604">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9605">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9606">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9610">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9611">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9615">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9616">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9617">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9619">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9621">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9622">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9623">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9625">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_show</S>
          <Obj N="takes_args" RefId="9626">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9627">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="9629">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="whoami" RefId="9630">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Describe currently authenticated identity.</S>
          <Obj N="takes_options" RefId="9631">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9632">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9633">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">whoami</S>
          <Obj N="takes_args" RefId="9636">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_add" RefId="9637">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new ID View.</S>
          <Obj N="takes_options" RefId="9638">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9639">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9641">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9642">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain_resolution_order</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">colon-separated list of domains used for short name qualification</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadomainresolutionorder</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9643">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9644">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain resolution order</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9645">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9649">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9651">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9653">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9654">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9655">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9659">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9660">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9665">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9666">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9668">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_add</S>
          <Obj N="takes_args" RefId="9669">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9670">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9672">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_mod" RefId="9673">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an HBAC rule.</S>
          <Obj N="takes_options" RefId="9674">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9675">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9676">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rule type</S>
                  <Obj N="values" RefId="9677">
                    <TNRef RefId="1" />
                    <LST>
                      <S>allow</S>
                      <S>deny</S>
                    </LST>
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">accessruletype</S>
                  <S N="cli_metavar">['allow', 'deny']</S>
                  <S N="default">allow</S>
                  <S N="doc">Rule type (allow)</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9679">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9680">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="9682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9683">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9684">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="9686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9687">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9688">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">srchostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">sourcehostcategory</S>
                  <S N="doc">Source host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Source host category</S>
                  <Obj N="values" RefId="9690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9692">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="9694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="9695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9696">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9698">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9699">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="9700">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9703">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9704">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9707">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9708">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9710">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9711">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9713">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9714">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9715">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9719">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9720">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9722">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9723">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9724">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9725">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9727">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9730">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9731">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9733">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9736">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9737">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9739">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9740">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9741">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9742">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9743">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9745">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9746">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the HBAC rule object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_mod</S>
          <Obj N="takes_args" RefId="9749">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9750">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_default_group_set" RefId="9753">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Set default (fallback) group for all unmatched entries._x000A_ </S>
          <Obj N="takes_options" RefId="9754">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9755">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9758">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">default_group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Default (fallback) group for entries to land</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automemberdefaultgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Default (fallback) Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9761">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="9763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="9764">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9765">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9766">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9767">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9768">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9769">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9771">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9772">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9777">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9779">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9780">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_default_group_set</S>
          <Obj N="takes_args" RefId="9781">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_add" RefId="9782">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new service delegation target.</S>
          <Obj N="takes_options" RefId="9783">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9784">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9787">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9788">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9791">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9792">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9793">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9795">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9797">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9798">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9799">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9801">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9803">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9804">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9805">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_add</S>
          <Obj N="takes_args" RefId="9808">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9809">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="9811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_add_member" RefId="9812">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Add members to a privilege.</S>
          <Obj N="takes_options" RefId="9813">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9814">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9815">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9818">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9820">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9821">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9824">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9826">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9827">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9829">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9830">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9831">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9832">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9833">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9835">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9836">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">roles to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_add_member</S>
          <Obj N="takes_args" RefId="9839">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9840">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9841">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certprofile_mod" RefId="9843">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Certificate Profile configuration.</S>
          <Obj N="takes_options" RefId="9844">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9845">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Brief description of this profile</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9846">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9847">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9848">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">store</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="9849">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Store issued certificates</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertprofilestoreissued</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">true</B>
                  <S N="doc">Whether to store certs issued using this profile</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9853">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9857">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9858">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9861">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9865">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9866">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9870">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">file</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">File containing profile configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">file</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">File containing profile configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9873">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9874">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9875">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9880">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9881">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9885">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9888">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certprofile_mod</S>
          <Obj N="takes_args" RefId="9889">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9890">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Profile ID for referring to this profile</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9892">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_add" RefId="9893">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new User ID override.</S>
          <Obj N="takes_options" RefId="9894">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9895">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9898">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="9900">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="9901">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="9903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9904">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9907">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="9909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9910">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9911">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9913">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9916">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaoriginaluid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;ipaoriginaluid&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaoriginaluid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9917">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;ipaoriginaluid&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9919">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9922">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="9923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9924">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9933">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9934">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9935">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9936">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9938">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9939">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9940">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9941">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="9945">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="9946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9950">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_add</S>
          <Obj N="takes_args" RefId="9954">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9955">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9957">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9958">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9959">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_reinitialize" RefId="9961">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Request a full re-initialization of the node retrieving data from the other node.</S>
          <Obj N="takes_options" RefId="9962">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9963">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">left</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9964">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;left&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">left</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Initialize left node</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9965">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9966">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9967">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9968">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">right</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9969">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;right&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">right</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Initialize right node</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9970">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9971">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9973">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">stop</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9974">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;stop&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">stop</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Stop already started refresh of chosen node(s)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9975">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9978">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="9979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="9980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_reinitialize</S>
          <Obj N="takes_args" RefId="9982">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9983">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="9984">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="9985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="9986">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="9987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_show" RefId="9989">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an User ID override.</S>
          <Obj N="takes_options" RefId="9990">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="9991">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9992">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="9993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9994">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="9995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="9996">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="9997">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="9998">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="9999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10001">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10002">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10003">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10006">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10007">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10008">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10009">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10010">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10012">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10013">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10014">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_show</S>
          <Obj N="takes_args" RefId="10017">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10018">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10019">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10021">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10023">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_remove_member" RefId="10024">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove member from a named service delegation target.</S>
          <Obj N="takes_options" RefId="10025">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10026">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10027">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10032">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10033">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10034">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10035">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10036">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10037">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10038">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10041">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10042">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">principals</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">principal to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10043">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member principal</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_remove_member</S>
          <Obj N="takes_args" RefId="10045">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10046">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10047">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="10048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_is_enabled" RefId="10049">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Checks if any of the servers has the CA service enabled._x000A_ </S>
          <Obj N="takes_options" RefId="10050">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10053">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10054">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_is_enabled</S>
          <Obj N="takes_args" RefId="10055">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountkey_del" RefId="10056">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an automount key.</S>
          <Obj N="takes_options" RefId="10057">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10058">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10059">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10060">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10061">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10063">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10064">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount key name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10065">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10067">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">info</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount information</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10068">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10069">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10070">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10072">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10073">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountkey_del</S>
          <Obj N="takes_args" RefId="10074">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10075">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10076">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10077">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10078">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountmap</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapautomountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_disable" RefId="10081">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable a CA.</S>
          <Obj N="takes_options" RefId="10082">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10083">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10086">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_disable</S>
          <Obj N="takes_args" RefId="10087">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10088">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10090">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_del" RefId="10091">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an ID View.</S>
          <Obj N="takes_options" RefId="10092">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10093">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10094">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10095">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10098">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10101">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_del</S>
          <Obj N="takes_args" RefId="10102">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10103">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="migrate_ds" RefId="10106">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Migrate users and groups from DS to IPA.</S>
          <Obj N="takes_options" RefId="10107">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10108">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">bind_dn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="default">cn=directory manager</S>
                  <S N="doc">Bind DN</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">binddn</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="10110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Bind DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10111">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_container</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="default">ou=people</S>
                  <S N="doc">DN of container for users in DS relative to base DN</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercontainer</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="10113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">User container</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10114">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">group_container</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="default">ou=groups</S>
                  <S N="doc">DN of container for groups in DS relative to base DN</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">groupcontainer</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="10116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Group container</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10117">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">user_objectclass</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User object class</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">userobjectclass</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>person</S>
                    </LST>
                  </Obj>
                  <S N="doc">Objectclasses used to search for user entries in DS</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10121">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">group_objectclass</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group object class</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">groupobjectclass</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10122">
                    <TNRef RefId="1" />
                    <LST>
                      <S>groupOfUniqueNames</S>
                      <S>groupOfNames</S>
                    </LST>
                  </Obj>
                  <S N="doc">Objectclasses used to search for group entries in DS</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10125">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">user_ignore_objectclass</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Ignore user object class</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">userignoreobjectclass</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Objectclasses to be ignored for user entries in DS</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10128">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10129">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">user_ignore_attribute</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Ignore user attribute</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">userignoreattribute</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Attributes to be ignored for user entries in DS</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10133">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">group_ignore_objectclass</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Ignore group object class</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">groupignoreobjectclass</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Objectclasses to be ignored for group entries in DS</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10135">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10137">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">group_ignore_attribute</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Ignore group attribute</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">groupignoreattribute</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10138">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Attributes to be ignored for group entries in DS</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10141">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">group_overwrite_gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10142">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Overwrite GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">groupoverwritegid</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">When migrating a group already existing in IPA domain overwrite the group GID and report as success</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10143">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10146">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">schema</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">LDAP schema</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">schema</S>
                  <S N="cli_metavar">['RFC2307bis', 'RFC2307']</S>
                  <S N="default">RFC2307bis</S>
                  <Obj N="values" RefId="10147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>RFC2307bis</S>
                      <S>RFC2307</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10148">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">The schema used on the LDAP server. Supported values are RFC2307 and RFC2307bis. The default is RFC2307bis</S>
                </MS>
              </Obj>
              <Obj RefId="10150">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10151">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Continue</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous operation mode. Errors are reported but the process continues</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10152">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10155">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">base_dn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base DN on remote LDAP server</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">basedn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Base DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">with_compat</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10159">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Ignore compat plugin</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">compat</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allows migration despite the usage of compat plugin</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10163">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ca_cert_file</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Load CA certificate of LDAP server from FILE</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cacertfile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">CA certificate</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10166">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">use_default_group</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10167">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Add to default group</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">use_def_group</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">true</B>
                  <S N="doc">Add migrated users without a group to a default group (default: true)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10168">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10171">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">scope</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Search scope</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">scope</S>
                  <S N="cli_metavar">['base', 'onelevel', 'subtree']</S>
                  <S N="default">onelevel</S>
                  <Obj N="values" RefId="10172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>base</S>
                      <S>onelevel</S>
                      <S>subtree</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">LDAP search scope for users and groups: base, onelevel, or subtree. Defaults to onelevel</S>
                </MS>
              </Obj>
              <Obj RefId="10175">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10178">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10179">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">exclude_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;exclude_groups&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">exclude_groups</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">groups to exclude from migration</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10183">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">exclude_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;exclude_users&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">exclude_users</S>
                  <S N="cli_metavar">STR</S>
                  <Obj N="default" RefId="10184">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">users to exclude from migration</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10185">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">migrate_ds</S>
          <Obj N="takes_args" RefId="10187">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10188">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ldap_uri</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">LDAP URI of DS server to migrate from</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ldapuri</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10189">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">LDAP URI</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10191">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">bind password</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">false</B>
                  <B N="query">false</B>
                  <S N="name">bindpw</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Password</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_add_member" RefId="10194">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to a vault.</S>
          <Obj N="takes_options" RefId="10195">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10196">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10199">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10200">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10201">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10202">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10204">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10207">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10208">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10209">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10210">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10211">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10213">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10214">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10215">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10219">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10222">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10223">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10224">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10227">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10229">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10231">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10232">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10235">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">services</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_add_member</S>
          <Obj N="takes_args" RefId="10238">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10239">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="10241">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_mod" RefId="10242">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a privilege.</S>
          <Obj N="takes_options" RefId="10243">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10244">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10247">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10248">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10251">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10252">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10253">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10255">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10256">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10259">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10260">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10261">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10262">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10264">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10265">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10266">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10268">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10270">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10271">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10272">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10275">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10276">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10277">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10278">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10279">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10280">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10281">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10282">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10283">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10286">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the privilege object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_mod</S>
          <Obj N="takes_args" RefId="10289">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10290">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_find" RefId="10293">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for Sudo Rule.</S>
          <Obj N="takes_options" RefId="10294">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10295">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10297">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10298">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10300">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10301">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="10302">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10303">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10304">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10305">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10306">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="10308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10310">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10311">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="10312">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10314">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cmdcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">cmdcategory</S>
                  <S N="doc">Command category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Command category</S>
                  <Obj N="values" RefId="10316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10318">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasusercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasusercategory</S>
                  <S N="doc">RunAs User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs User category</S>
                  <Obj N="values" RefId="10320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10321">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10322">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10323">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasgroupcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasgroupcategory</S>
                  <S N="doc">RunAs Group category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs Group category</S>
                  <Obj N="values" RefId="10324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10326">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">order</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10327">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Sudo order</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sudoorder</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">integer to order the Sudo rules</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="10328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10329">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the rule applies to (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">externaluser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10332">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10335">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipasudorunasextuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10336">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10338">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternalgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External Group the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipasudorunasextgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10339">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10340">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10341">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="10343">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10344">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="10346">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10347">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10348">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10349">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10350">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10353">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10354">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10356">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10358">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10359">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10363">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10364">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10369">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10370">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("sudorule-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_find</S>
          <Obj N="takes_args" RefId="10374">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10375">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10377">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="pwpolicy_del" RefId="10378">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a group password policy.</S>
          <Obj N="takes_options" RefId="10379">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10380">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10381">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10382">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10385">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10388">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pwpolicy_del</S>
          <Obj N="takes_args" RefId="10389">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10390">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage password policy for specific group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10391">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_enable" RefId="10393">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable a Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="10394">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10395">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10398">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_enable</S>
          <Obj N="takes_args" RefId="10399">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10400">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_remove_privilege" RefId="10403">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove privileges from a role.</S>
          <Obj N="takes_options" RefId="10404">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10405">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10406">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10407">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10410">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10411">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10412">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10413">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10414">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10417">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10418">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10421">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10422">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10426">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10427">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">privileges</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">privileges</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">privilege</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">privilege</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_remove_privilege</S>
          <Obj N="takes_args" RefId="10430">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10431">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_del" RefId="10434">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a host.</S>
          <Obj N="takes_options" RefId="10435">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10436">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10437">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10438">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10441">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">updatedns</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10442">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;updatedns&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">updatedns</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Remove A, AAAA, SSHFP and PTR records of the host(s) managed by IPA DNS</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10443">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10444">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10446">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10447">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10448">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10449">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_del</S>
          <Obj N="takes_args" RefId="10450">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10451">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_del" RefId="10454">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a privilege.</S>
          <Obj N="takes_options" RefId="10455">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10456">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10457">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10458">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10460">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10461">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10463">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10464">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_del</S>
          <Obj N="takes_args" RefId="10465">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10466">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10468">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_remove_host" RefId="10469">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove target hosts and hostgroups from an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="10470">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10471">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10472">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10474">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10475">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10477">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10478">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10481">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10483">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10487">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10488">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10493">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10496">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_remove_host</S>
          <Obj N="takes_args" RefId="10499">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10500">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="realmdomains_show" RefId="10503">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the list of realm domains.</S>
          <Obj N="takes_options" RefId="10504">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10505">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10506">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10508">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10510">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10511">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10514">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10515">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10516">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10517">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10520">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10521">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10522">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10525">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">realmdomains_show</S>
          <Obj N="takes_args" RefId="10526">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_mod" RefId="10527">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an User ID override.</S>
          <Obj N="takes_options" RefId="10528">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10529">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10530">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10532">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="10534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="10535">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10536">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="10537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10538">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10541">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="10543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10544">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10547">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10548">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10549">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10550">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaoriginaluid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;ipaoriginaluid&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaoriginaluid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;ipaoriginaluid&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10553">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10554">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10556">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10558">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10559">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10560">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10562">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10563">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10565">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10567">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10570">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10571">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10572">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10573">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10575">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10576">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10577">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10578">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10581">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10582">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10586">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10587">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10588">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10589">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10593">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10594">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10597">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the User ID override object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_mod</S>
          <Obj N="takes_args" RefId="10600">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10601">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10603">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10604">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10605">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10606">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_user" RefId="10607">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users and groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="10608">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10609">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10610">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10615">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10616">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10617">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10621">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10622">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10624">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10625">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10626">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10627">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10629">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10630">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10631">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10632">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10634">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10635">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10636">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_user</S>
          <Obj N="takes_args" RefId="10637">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10638">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_allow_command" RefId="10641">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove commands and sudo command groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="10642">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10643">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10644">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10645">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10647">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10649">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10650">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10654">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10655">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10659">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10660">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10665">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10668">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmdgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo command groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmdgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_allow_command</S>
          <Obj N="takes_args" RefId="10671">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10672">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverridegroup_mod" RefId="10675">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an Group ID override.</S>
          <Obj N="takes_options" RefId="10676">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10677">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10680">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="10682">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="10683">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="10685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10687">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10690">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10692">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10694">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10696">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10698">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10699">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10704">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="10705">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10708">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10709">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10714">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10715">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10717">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10722">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10724">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the Group ID override object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10726">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverridegroup_mod</S>
          <Obj N="takes_args" RefId="10727">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10728">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10731">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10732">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dns_resolve" RefId="10734">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Resolve a host name in DNS. (Deprecated)</S>
          <Obj N="takes_options" RefId="10735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10736">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10737">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10739">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dns_resolve</S>
          <Obj N="takes_args" RefId="10740">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10741">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Hostname (FQDN)</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Hostname (FQDN)</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_del" RefId="10744">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="10745">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10746">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10747">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10748">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10751">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10752">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10754">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_del</S>
          <Obj N="takes_args" RefId="10755">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10756">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="param_show" RefId="10759">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a command parameter.</S>
          <Obj N="takes_options" RefId="10760">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10761">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10762">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10765">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10767">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10768">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10773">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">param_show</S>
          <Obj N="takes_args" RefId="10777">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10778">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">metaobject</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">metaobjectfull_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10781">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10782">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10783">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_add_manager" RefId="10784">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a manager to the stage user entry</S>
          <Obj N="takes_options" RefId="10785">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10786">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10787">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10788">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10792">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10793">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10795">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10797">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10798">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10799">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10800">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10801">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10802">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10803">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10804">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10805">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10808">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_add_manager</S>
          <Obj N="takes_args" RefId="10811">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10812">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="10814">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_remove_manager" RefId="10815">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove a manager to the user entry</S>
          <Obj N="takes_options" RefId="10816">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10817">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10818">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10821">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10823">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10824">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10830">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10831">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10832">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10833">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10834">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10835">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10836">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10837">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10838">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10839">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10840">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10841">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_remove_manager</S>
          <Obj N="takes_args" RefId="10842">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10843">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10844">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="10845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_del" RefId="10846">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a netgroup.</S>
          <Obj N="takes_options" RefId="10847">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10848">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10849">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10853">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10856">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_del</S>
          <Obj N="takes_args" RefId="10857">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10858">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_remove_managedby" RefId="10861">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users that can manage this token.</S>
          <Obj N="takes_options" RefId="10862">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10863">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10864">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10866">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10869">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10870">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10872">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10873">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10875">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10880">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10881">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10885">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_remove_managedby</S>
          <Obj N="takes_args" RefId="10888">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10889">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10890">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_remove_principal" RefId="10892">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove principal alias from the stageuser entry</S>
          <Obj N="takes_options" RefId="10893">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10894">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10895">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10897">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10899">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10900">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10901">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10902">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10903">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10905">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10906">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10907">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10909">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10910">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10911">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10912">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10915">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_remove_principal</S>
          <Obj N="takes_args" RefId="10916">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10917">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="10918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="10919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="10920">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="10922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_split_parts" RefId="10923">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="10924">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_split_parts</S>
          <Obj N="takes_args" RefId="10929">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10930">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;name&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;name&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10933">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">value</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;value&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">value</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;value&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_find" RefId="10936">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for a netgroup.</S>
          <Obj N="takes_options" RefId="10937">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="10938">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10941">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Netgroup description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10943">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10944">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">nisdomain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NIS domain name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nisdomainname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NIS domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10947">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">uuid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA unique ID</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipauniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10948">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">IPA unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10950">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="10952">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10953">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10954">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="10955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="10956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="10957">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10958">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="10959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="10960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="10961">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="10963">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10964">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10965">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="10966">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10967">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">private</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10968">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;private&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">private</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">&lt;private&gt;</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10970">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10971">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10972">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10973">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">managed</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="10974">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;managed&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">managed</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">search for managed groups</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10975">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10978">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10979">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10984">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10985">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10987">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10990">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="10991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="10992">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="10994">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="10995">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="10996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="10997">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="10998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="10999">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11000">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11001">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11002">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11005">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups with these member netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11006">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11008">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">no_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups without these member netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11009">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11011">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for netgroups with these member users.</S>
                  <Obj N="flags" RefId="11013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11014">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">no_users</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">user</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_user</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for netgroups without these member users.</S>
                  <Obj N="flags" RefId="11016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11017">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11018">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for netgroups with these member groups.</S>
                  <Obj N="flags" RefId="11019">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11020">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">no_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for netgroups without these member groups.</S>
                  <Obj N="flags" RefId="11022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11023">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for netgroups with these member hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11026">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">no_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for netgroups without these member hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">no_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11027">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11029">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups with these member host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11031">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11032">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">no_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups without these member host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11033">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11035">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11036">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11038">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for netgroups without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11039">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_find</S>
          <Obj N="takes_args" RefId="11041">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11042">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11043">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_find" RefId="11045">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for trusts.</S>
          <Obj N="takes_options" RefId="11046">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11047">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11050">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">flat_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain NetBIOS name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipantflatname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11051">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11052">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain NetBIOS name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11053">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain Security Identifier</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11054">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain Security Identifier</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11056">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid_blacklist_incoming</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SID blacklist incoming</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipantsidblacklistincoming</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SID blacklist incoming</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11059">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid_blacklist_outgoing</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SID blacklist outgoing</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipantsidblacklistoutgoing</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11060">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11061">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SID blacklist outgoing</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11062">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11063">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11064">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11065">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11067">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11068">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11069">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11070">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11072">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11073">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11074">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11075">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11076">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11078">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11079">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11080">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11081">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11082">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11083">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11084">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11085">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("realm")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11086">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11087">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_find</S>
          <Obj N="takes_args" RefId="11089">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11090">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11091">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_del" RefId="11093">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete Sudo Rule.</S>
          <Obj N="takes_options" RefId="11094">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11095">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11096">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11097">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11098">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11100">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11101">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11102">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_del</S>
          <Obj N="takes_args" RefId="11104">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11105">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11106">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_show" RefId="11108">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="11109">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11110">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11111">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11112">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11113">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11115">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11116">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11117">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11120">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11121">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11122">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11123">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11124">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11125">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11126">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11127">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11128">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_show</S>
          <Obj N="takes_args" RefId="11131">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11132">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_mod" RefId="11135">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an ID View.</S>
          <Obj N="takes_options" RefId="11136">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11137">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11138">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11140">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain_resolution_order</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">colon-separated list of domains used for short name qualification</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipadomainresolutionorder</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11141">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain resolution order</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11143">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11144">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11147">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11148">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11150">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11151">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11152">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11155">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11156">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11157">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11158">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11160">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11161">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11162">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11163">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11165">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11166">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11167">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11168">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11171">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11172">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11173">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11175">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11176">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the ID View object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_mod</S>
          <Obj N="takes_args" RefId="11179">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11180">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_mod_internal" RefId="11183">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="11184">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11185">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11188">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipavaulttype</S>
                  <S N="cli_metavar">['standard', 'symmetric', 'asymmetric']</S>
                  <S N="default">symmetric</S>
                  <Obj N="values" RefId="11189">
                    <TNRef RefId="1" />
                    <LST>
                      <S>standard</S>
                      <S>symmetric</S>
                      <S>asymmetric</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault type</S>
                </MS>
              </Obj>
              <Obj RefId="11192">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">salt</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault salt</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipavaultsalt</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11194">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Salt</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11195">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">public_key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">BYTES</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Vault public key</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipavaultpublickey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11197">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Public key</S>
                  <S N="type">str</S>
                  <S N="class">Bytes</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11198">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11202">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11203">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11206">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11207">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11210">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11211">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11215">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11216">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11218">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11219">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11220">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11223">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11225">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11226">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11227">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11231">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11232">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11233">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11234">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11235">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11237">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11238">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11241">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11242">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11243">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11244">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11245">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11247">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_mod_internal</S>
          <Obj N="takes_args" RefId="11248">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11249">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11250">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="11251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certprofile_import" RefId="11252">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Import a Certificate Profile.</S>
          <Obj N="takes_options" RefId="11253">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11254">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Brief description of this profile</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11256">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11257">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">store</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="11258">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Store issued certificates</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertprofilestoreissued</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">true</B>
                  <S N="doc">Whether to store certs issued using this profile</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11262">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">file</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Filename of a raw profile. The XML format is not supported.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">file</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11263">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Filename of a raw profile. The XML format is not supported.</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11265">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11266">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11268">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11271">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11272">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11276">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11277">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11278">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11280">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certprofile_import</S>
          <Obj N="takes_args" RefId="11281">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11282">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Profile ID for referring to this profile</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="delegation_del" RefId="11285">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a delegation.</S>
          <Obj N="takes_options" RefId="11286">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11287">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11288">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">delegation_del</S>
          <Obj N="takes_args" RefId="11291">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11292">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delegation name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11293">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delegation name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverridegroup_del" RefId="11295">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an Group ID override.</S>
          <Obj N="takes_options" RefId="11296">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11297">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11298">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11299">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11300">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11302">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11303">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11307">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverridegroup_del</S>
          <Obj N="takes_args" RefId="11311">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11312">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11315">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11316">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmap_match" RefId="11318">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Search for users matching the provided certificate._x000A__x000A_ This command relies on SSSD to retrieve the list of matching users and_x000A_ may return cached data. For more information on purging SSSD cache,_x000A_ please refer to sss_cache documentation._x000A_ </S>
          <Obj N="takes_options" RefId="11319">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11320">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11321">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11322">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11324">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11326">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11327">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11328">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11332">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11335">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmap_match</S>
          <Obj N="takes_args" RefId="11336">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11337">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_show" RefId="11340">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a trust.</S>
          <Obj N="takes_options" RefId="11341">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11342">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11343">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11347">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11348">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11349">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11350">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11353">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11354">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11356">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11358">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11359">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_show</S>
          <Obj N="takes_args" RefId="11363">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11364">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11365">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_find" RefId="11367">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for IPA servers.</S>
          <Obj N="takes_options" RefId="11368">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11369">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11372">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlevel</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min domain level</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipamindomainlevel</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum domain level</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="11374">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11375">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxlevel</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max domain level</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipamaxdomainlevel</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum domain level</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="11377">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11378">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11380">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11381">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11384">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11385">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11389">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11390">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11391">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11392">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11395">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11396">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11401">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11402">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11405">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11406">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11407">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11410">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11411">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffixes</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for servers with these managed suffixes.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffix</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11412">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">suffix</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11414">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">no_topologysuffixes</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for servers without these managed suffixes.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">no_topologysuffix</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">suffix</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11417">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">in_locations</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">location</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_location</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Search for servers with these ipa locations.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11420">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">not_in_locations</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">location</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_location</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Search for servers without these ipa locations.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11422">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11423">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">servroles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for servers with these enabled roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">servrole</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_find</S>
          <Obj N="takes_args" RefId="11426">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11427">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_find" RefId="11430">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for topology segments.</S>
          <Obj N="takes_options" RefId="11431">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11432">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11434">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11435">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, -, . and $</S>
                  <S N="cli_name">leftnode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9.][a-zA-Z0-9.-]*[a-zA-Z0-9.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Left node</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentleftnode</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Left replication node - an IPA server</S>
                  <Obj N="flags" RefId="11437">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11438">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, -, . and $</S>
                  <S N="cli_name">rightnode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9.][a-zA-Z0-9.-]*[a-zA-Z0-9.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Right node</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentrightnode</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Right replication node - an IPA server</S>
                  <Obj N="flags" RefId="11440">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11441">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">direction</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Connectivity</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentdirection</S>
                  <S N="cli_metavar">['both', 'left-right', 'right-left']</S>
                  <S N="default">both</S>
                  <Obj N="values" RefId="11442">
                    <TNRef RefId="1" />
                    <LST>
                      <S>both</S>
                      <S>left-right</S>
                      <S>right-left</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Direction of replication between left and right replication node</S>
                </MS>
              </Obj>
              <Obj RefId="11445">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">stripattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A space separated list of attributes which are removed from replication updates.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nsds5replicastripattrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11447">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to strip</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11448">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a fractional update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nsds5replicatedattributelist</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to replicate</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11451">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrstotal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a total update. E.g. (objectclass=*) $ EXCLUDE accountlockout</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">nsds5replicatedattributelisttotal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes for total update</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11454">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Session timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsds5replicatimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of seconds outbound LDAP operations waits for a response from the remote replica before timing out and failing</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11456">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11457">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">enabled</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['on', 'off']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">nsds5replicaenabled</S>
                  <S N="doc">Whether a replication agreement is active, meaning whether replication is occurring per that agreement</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Replication agreement enabled</S>
                  <Obj N="values" RefId="11459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>on</S>
                      <S>off</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="11460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11461">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11464">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11465">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11466">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11467">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11468">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11470">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11471">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11473">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11474">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11479">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11481">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11483">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11484">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11485">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11486">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11487">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_find</S>
          <Obj N="takes_args" RefId="11488">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11489">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11490">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11492">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11493">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="location_add" RefId="11495">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new IPA location.</S>
          <Obj N="takes_options" RefId="11496">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11497">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">description</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA Location description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11499">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11500">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11501">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11504">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11505">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11508">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11509">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11511">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11512">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11514">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11515">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11520">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11521">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11522">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">location_add</S>
          <Obj N="takes_args" RefId="11524">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11525">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Location name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">IPA location name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11526">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certprofile_del" RefId="11528">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a Certificate Profile.</S>
          <Obj N="takes_options" RefId="11529">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11530">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11531">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11535">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11538">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certprofile_del</S>
          <Obj N="takes_args" RefId="11539">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11540">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Profile ID for referring to this profile</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11541">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="batch" RefId="11543">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="11544">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11545">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11548">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">batch</S>
          <Obj N="takes_args" RefId="11549">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11550">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">methods</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DICT</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Nested Methods to execute</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">methods</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;methods&gt;</S>
                  <S N="type">dict</S>
                  <S N="class">Dict</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_disable" RefId="11553">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable the Kerberos key, SSL certificate and all services of a host.</S>
          <Obj N="takes_options" RefId="11554">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11555">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11556">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11558">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_disable</S>
          <Obj N="takes_args" RefId="11559">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11560">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11562">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_add_certmapdata" RefId="11563">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add one or more certificate mappings to the user entry.</S>
          <Obj N="takes_options" RefId="11564">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11565">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuer</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11568">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11569">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subject</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11571">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11572">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11573">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11574">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11575">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11578">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11580">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11581">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11585">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11586">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11587">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11589">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11590">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11591">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11592">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11593">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_add_certmapdata</S>
          <Obj N="takes_args" RefId="11596">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11597">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="11599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="11600">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">certmapdata</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate mapping data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapdata</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11601">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate mapping data</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_add_cert" RefId="11603">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add one or more certificates to the idoverrideuser entry</S>
          <Obj N="takes_options" RefId="11604">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11605">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11606">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11610">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11611">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11615">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11616">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11617">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11619">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11621">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11622">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11623">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11625">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11626">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11627">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_add_cert</S>
          <Obj N="takes_args" RefId="11629">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11630">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11631">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11632">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11633">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11635">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_add_host" RefId="11636">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add target hosts and hostgroups to an HBAC rule.</S>
          <Obj N="takes_options" RefId="11637">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11638">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11639">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11641">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11643">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11644">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11645">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11649">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11650">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11651">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11654">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11655">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11656">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11657">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11660">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11661">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11662">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11663">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11665">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_add_host</S>
          <Obj N="takes_args" RefId="11666">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11667">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_disable" RefId="11670">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable the Kerberos key and SSL certificate of a service.</S>
          <Obj N="takes_options" RefId="11671">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11672">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11675">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_disable</S>
          <Obj N="takes_args" RefId="11676">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11677">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_add" RefId="11680">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create new DNS zone (SOA record).</S>
          <Obj N="takes_options" RefId="11681">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11682">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11685">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11686">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11687">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11688">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="11690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="11691">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11692">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name_server</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Authoritative nameserver</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoamname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Authoritative nameserver domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11694">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11695">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">admin_email</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Administrator e-mail address</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="default"></S>
                  <S N="doc">Administrator e-mail address</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11696">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11698">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA serial</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaserial</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SOA record serial number</S>
                  <B N="required">true</B>
                  <I64 N="maxvalue">4294967295</I64>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="11700">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11701">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">refresh</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA refresh</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarefresh</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">SOA record refresh time</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11704">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retry</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11705">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA retry</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaretry</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">900</I32>
                  <S N="doc">SOA record retry time</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11707">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">expire</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11708">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA expire</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaexpire</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">1209600</I32>
                  <S N="doc">SOA record expire time</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11710">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minimum</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA minimum</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaminimum</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">How long should negative responses be cached</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11713">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11714">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records at zone apex</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11716">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">default_ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Default time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsdefaultttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records without explicit TTL definition</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="11718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11719">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11720">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="11721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="11722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11723">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">update_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">BIND update policy</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsupdatepolicy</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="11724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">BIND update policy</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11726">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dynamic_update</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11727">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Dynamic update</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowdynupdate</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow dynamic updates.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11731">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_query</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow query</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowquery</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">any;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to issue queries</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11732">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11734">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_transfer</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow transfer</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowtransfer</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">none;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to transfer the zone</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11735">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11737">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_sync_ptr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="11738">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow PTR sync</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowsyncptr</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11739">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11741">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11742">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnssec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="11743">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow in-line DNSSEC signing</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssecinlinesigning</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow inline DNSSEC signing of records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="11744">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11745">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11747">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">expected format: &lt;0-255&gt; &lt;0-255&gt; &lt;0-65535&gt; even-length_hexadecimal_digits_or_hyphen</S>
                  <S N="cli_name">nsec3param_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^\d+ \d+ \d+ (([0-9a-fA-F]{2})+|-)$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC3PARAM record</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsec3paramrecord</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11750">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11751">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11754">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11758">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">skip_overlap_check</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11759">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;skip_overlap_check&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">skip_overlap_check</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force DNS zone creation even if it will overlap with an existing zone.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11760">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11761">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11763">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11764">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;force&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force DNS zone creation even if nameserver is not resolvable. (Deprecated)</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11765">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11766">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11768">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">skip_nameserver_check</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="11769">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;skip_nameserver_check&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">skip_nameserver_check</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force DNS zone creation even if nameserver is not resolvable.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11772">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11773">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">ip_address</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;ip_address&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ip_address</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;ip_address&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11777">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11781">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11782">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11783">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11784">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11787">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11788">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11789">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_add</S>
          <Obj N="takes_args" RefId="11792">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11793">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="11794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_runasgroup" RefId="11796">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove group for Sudo to execute as.</S>
          <Obj N="takes_options" RefId="11797">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11798">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11799">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11801">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11802">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11803">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11804">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11805">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11809">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11810">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11811">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11813">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11814">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11815">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11818">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11820">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11821">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_runasgroup</S>
          <Obj N="takes_args" RefId="11823">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11824">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_runasuser" RefId="11827">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users and groups for Sudo to execute as.</S>
          <Obj N="takes_options" RefId="11828">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11829">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11830">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11832">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11834">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11835">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11836">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11838">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11840">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11841">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11845">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11846">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11848">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11851">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11854">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_runasuser</S>
          <Obj N="takes_args" RefId="11857">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11858">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_add" RefId="11861">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new HBAC service group.</S>
          <Obj N="takes_options" RefId="11862">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11863">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11866">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11870">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11873">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11874">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11875">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11877">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11880">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11881">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11883">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11884">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11886">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11887">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11890">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11891">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11893">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_add</S>
          <Obj N="takes_args" RefId="11896">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11897">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_remove_condition" RefId="11900">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Remove conditions from an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="11901">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11902">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11905">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">inclusive_regex</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Inclusive Regex</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automemberinclusiveregex</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11906">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Inclusive Regex</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11908">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">exclusive_regex</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Exclusive Regex</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automemberexclusiveregex</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11909">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Exclusive Regex</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11911">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attribute to filter via regex. For example fqdn for a host, or manager for a user</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">key</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11912">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attribute Key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11914">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="11916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="11917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11918">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11919">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11920">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11921">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11923">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11924">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11925">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11927">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11929">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11930">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11931">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11933">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_remove_condition</S>
          <Obj N="takes_args" RefId="11934">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11935">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_default_group_show" RefId="11938">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Display information about the default (fallback) automember groups._x000A_ </S>
          <Obj N="takes_options" RefId="11939">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11940">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="11941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="11942">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="11943">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11945">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11950">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11951">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11952">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11954">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11955">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11956">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_default_group_show</S>
          <Obj N="takes_args" RefId="11960">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmdgroup_add" RefId="11961">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create new Sudo Command Group.</S>
          <Obj N="takes_options" RefId="11962">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11963">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11965">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="11966">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11969">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11970">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11974">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11975">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11976">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11977">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11978">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11980">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11981">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11982">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11983">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11984">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11985">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11986">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="11987">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="11988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="11990">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="11991">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="11992">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="11993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="11994">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="11995">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmdgroup_add</S>
          <Obj N="takes_args" RefId="11996">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="11997">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudocmdgroup_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command Group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="11998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="11999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_runasgroup" RefId="12000">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add group for Sudo to execute as.</S>
          <Obj N="takes_options" RefId="12001">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12002">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12003">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12005">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12006">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12007">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12008">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12009">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12010">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12011">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12014">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12017">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12018">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12019">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12021">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12023">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12024">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12026">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_runasgroup</S>
          <Obj N="takes_args" RefId="12027">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12028">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12029">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_mod" RefId="12031">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Modify trustdomain of the trust</S>
          <Obj N="takes_options" RefId="12032">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12033">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">flat_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain NetBIOS name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantflatname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain NetBIOS name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12036">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain Security Identifier</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain Security Identifier</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12039">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12040">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12041">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12043">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12044">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12046">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12052">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Trust type (ad for Active Directory, default)</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">trust_type</S>
                  <S N="cli_metavar">['ad']</S>
                  <S N="default">ad</S>
                  <Obj N="values" RefId="12057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ad</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Trust type (ad for Active Directory, default)</S>
                </MS>
              </Obj>
              <Obj RefId="12060">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12061">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12062">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12063">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12064">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12066">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12067">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12069">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12072">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12073">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12075">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_mod</S>
          <Obj N="takes_args" RefId="12076">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12077">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12078">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12080">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12081">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12082">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_show" RefId="12083">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a named service delegation rule.</S>
          <Obj N="takes_options" RefId="12084">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12085">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12086">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12087">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12090">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12091">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12092">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12093">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12095">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12096">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12097">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12098">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12099">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12101">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12102">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_show</S>
          <Obj N="takes_args" RefId="12112">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12113">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="12115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverrideuser_find" RefId="12116">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an User ID override.</S>
          <Obj N="takes_options" RefId="12117">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12118">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12121">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12124">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12125">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="12126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="12127">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12128">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="12129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12130">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12133">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="12135">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12136">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12138">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12139">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12140">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12141">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12142">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">ipaoriginaluid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;ipaoriginaluid&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaoriginaluid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12143">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;ipaoriginaluid&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12148">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12150">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12151">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12152">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12155">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12156">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12157">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12158">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12159">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12161">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12162">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12163">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12165">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12167">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12168">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12171">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12172">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12173">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("anchor")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverrideuser_find</S>
          <Obj N="takes_args" RefId="12177">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12178">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12181">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_find" RefId="12184">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for stage users.</S>
          <Obj N="takes_options" RefId="12185">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12186">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="12188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="12189">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12192">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12194">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12195">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12198">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">displayname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12199">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12201">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">initials</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12202">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12204">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12207">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12210">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12211">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12213">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12216">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12219">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12220">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12222">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12223">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12225">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12227">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12228">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12229">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="12231">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12232">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="12234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12235">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12238">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12239">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12240">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12241">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12243">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12244">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12247">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12250">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12253">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12256">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12259">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12262">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12265">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12267">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12268">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12271">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12272">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="12273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="12274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12275">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12278">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12281">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12284">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12285">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12286">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12287">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12290">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12292">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12293">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12296">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12297">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12298">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12299">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12300">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12301">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12302">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12303">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12305">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12306">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12307">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12311">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12312">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12313">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12317">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12318">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12321">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12322">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12327">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12328">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("login")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12332">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12333">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for stage users with these member of groups.</S>
                  <Obj N="flags" RefId="12334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="12335">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">not_in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12336">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for stage users without these member of groups.</S>
                  <Obj N="flags" RefId="12337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="12338">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for stage users with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12339">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12340">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12341">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for stage users without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12344">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users with these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12347">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users without these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12350">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users with these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12352">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12353">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users without these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12354">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12356">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users with these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12358">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12359">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for stage users without these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_find</S>
          <Obj N="takes_args" RefId="12362">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12363">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12364">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12365">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_enable" RefId="12366">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable a CA.</S>
          <Obj N="takes_options" RefId="12367">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12368">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12369">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_enable</S>
          <Obj N="takes_args" RefId="12372">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12373">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_disallow_create_keytab" RefId="12376">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disallow users, groups, hosts or host groups to create a keytab of this host.</S>
          <Obj N="takes_options" RefId="12377">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12378">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12379">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12380">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12381">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12383">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12384">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12385">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12389">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12390">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12394">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12395">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12400">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12403">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12405">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12406">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12409">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12410">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_disallow_create_keytab</S>
          <Obj N="takes_args" RefId="12412">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12413">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12415">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_remove_managedby" RefId="12416">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove hosts that can manage this host.</S>
          <Obj N="takes_options" RefId="12417">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12418">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12419">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12421">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12422">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12424">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12425">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12426">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12429">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12430">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12431">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12434">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12435">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12437">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12439">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12440">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12441">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_remove_managedby</S>
          <Obj N="takes_args" RefId="12443">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12444">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="delegation_show" RefId="12447">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a delegation.</S>
          <Obj N="takes_options" RefId="12448">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12449">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12450">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12451">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12455">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12456">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12458">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12460">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12461">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12463">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12464">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">delegation_show</S>
          <Obj N="takes_args" RefId="12465">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12466">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delegation name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12468">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delegation name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_remove_host" RefId="12469">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove target hosts and hostgroups from an HBAC rule.</S>
          <Obj N="takes_options" RefId="12470">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12471">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12472">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12474">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12475">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12477">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12478">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12481">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12483">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12487">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12488">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12490">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12493">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12496">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_remove_host</S>
          <Obj N="takes_args" RefId="12499">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12500">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_remove_cert" RefId="12503">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove one or more certificates to the user entry</S>
          <Obj N="takes_options" RefId="12504">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12505">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12506">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12508">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12511">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12512">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12517">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12520">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12521">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12522">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12524">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12526">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12527">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12529">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_remove_cert</S>
          <Obj N="takes_args" RefId="12530">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12531">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12532">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="12533">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_find" RefId="12534">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for hostgroups.</S>
          <Obj N="takes_options" RefId="12535">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12536">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12538">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12539">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this host-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12541">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12542">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12544">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12545">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12548">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12549">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12550">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12552">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12553">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12554">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12555">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12556">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12559">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12560">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12561">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12562">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12563">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12564">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12565">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12570">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12571">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("hostgroup-name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12575">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups with these member hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12578">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">no_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups without these member hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">no_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12581">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups with these member host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12582">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12583">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12584">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">no_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups without these member host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12587">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups with these member of host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12589">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12590">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_hostgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">host group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_hostgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups without these member of host groups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12593">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12596">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for host groups without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12599">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups with these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12600">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12602">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups without these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12603">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12604">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12605">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups with these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12606">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12607">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12608">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for host groups without these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12610">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_find</S>
          <Obj N="takes_args" RefId="12611">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12612">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_find" RefId="12615">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for roles.</S>
          <Obj N="takes_options" RefId="12616">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12617">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12620">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this role-group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12621">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12623">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12625">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12626">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12627">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12629">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12630">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12631">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12635">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12636">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12641">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12642">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12645">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12646">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12651">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12652">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12655">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_find</S>
          <Obj N="takes_args" RefId="12656">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12657">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cosentry_mod" RefId="12660">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="12661">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12662">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbpwdpolicyreference</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;krbpwdpolicyreference&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpwdpolicyreference</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;krbpwdpolicyreference&gt;</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12665">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cospriority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;cospriority&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">&lt;cospriority&gt;</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12667">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12668">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12669">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12672">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12676">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12677">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12680">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12681">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12683">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12685">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12686">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12687">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12688">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12690">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12691">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12692">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12693">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12697">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12698">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cosentry_mod</S>
          <Obj N="takes_args" RefId="12701">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12702">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;cn&gt;</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12704">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;cn&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_remove_user" RefId="12705">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users and groups from a CA ACL.</S>
          <Obj N="takes_options" RefId="12706">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12707">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12708">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12709">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12711">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12713">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12714">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12715">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12718">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12719">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12720">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12721">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12723">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12724">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12729">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12730">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12731">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12732">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_remove_user</S>
          <Obj N="takes_args" RefId="12735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12736">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_find" RefId="12739">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for CAs.</S>
          <Obj N="takes_options" RefId="12740">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12741">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12744">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description of the purpose of the CA</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12745">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12747">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Dogtag Authority ID</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipacaid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12748">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Authority ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12750">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject Distinguished Name</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipacasubjectdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12752">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12753">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12754">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer Distinguished Name</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipacaissuerdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12756">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12759">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="12761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12762">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12763">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12765">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12766">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12767">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12768">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12769">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12771">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12772">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12774">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12775">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12776">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12777">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12778">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12779">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="12780">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_find</S>
          <Obj N="takes_args" RefId="12783">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12784">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_enable" RefId="12787">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable a CA ACL.</S>
          <Obj N="takes_options" RefId="12788">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12789">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12790">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12791">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12792">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_enable</S>
          <Obj N="takes_args" RefId="12793">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12794">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountkey_add" RefId="12797">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new automount key.</S>
          <Obj N="takes_options" RefId="12798">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12799">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount key name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>req_update</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12802">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">info</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount information</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12805">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12809">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12810">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12816">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12818">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12819">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12820">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12824">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12825">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountkey_add</S>
          <Obj N="takes_args" RefId="12829">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12830">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12831">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12833">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountmap</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapautomountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12835">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_request" RefId="12836">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Submit a certificate signing request.</S>
          <Obj N="takes_options" RefId="12837">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12838">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">request_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;request_type&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">request_type</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">pkcs10</S>
                  <S N="doc">&lt;request_type&gt;</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12840">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_update</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12841">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">profile_id</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Profile to use</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">profile_id</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12842">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Profile ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12844">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ca</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Issuing CA</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cacn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">ipa</S>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12846">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12847">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal for this certificate (e.g. HTTP/test.example.com)</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12849">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12850">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">add</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12851">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;add&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">add</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">automatically add the principal if it doesn't exist (service principals only)</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12853">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12854">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12855">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">chain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12856">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;chain&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">chain</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include certificate chain in output</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12857">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12860">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12861">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12863">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12866">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12867">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12869">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12872">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12873">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12875">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_request</S>
          <Obj N="takes_args" RefId="12876">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12877">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">csr_file</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATESIGNINGREQUEST</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">CSR</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">csr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12879">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">CSR</S>
                  <S N="type">CertificateSigningRequest</S>
                  <S N="class">CertificateSigningRequest</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_del" RefId="12880">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an HBAC rule.</S>
          <Obj N="takes_options" RefId="12881">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12882">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="12883">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12887">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12888">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12889">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12890">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_del</S>
          <Obj N="takes_args" RefId="12891">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12892">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12893">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_add" RefId="12895">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new privilege.</S>
          <Obj N="takes_options" RefId="12896">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12897">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12898">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12900">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12901">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12904">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12905">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12908">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12909">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12910">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12911">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12914">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12915">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12916">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12917">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12919">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12920">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12921">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12923">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12924">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12925">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12927">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12929">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_add</S>
          <Obj N="takes_args" RefId="12930">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12931">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_remove_manager" RefId="12934">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove a manager to the stage user entry</S>
          <Obj N="takes_options" RefId="12935">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12936">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12937">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12938">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12939">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12941">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12942">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12943">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12944">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12945">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12948">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12952">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12953">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12954">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12955">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12958">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12959">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_remove_manager</S>
          <Obj N="takes_args" RefId="12961">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12962">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="12963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="12964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_show" RefId="12965">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Display information about an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="12966">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12967">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="12968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="12969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="12970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="12971">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12972">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12974">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12975">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12976">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12977">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="12978">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="12979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="12980">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="12981">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12982">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="12983">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12986">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_show</S>
          <Obj N="takes_args" RefId="12987">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12988">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="12990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_enable" RefId="12991">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable an HBAC rule.</S>
          <Obj N="takes_options" RefId="12992">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12993">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="12994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="12995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="12996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_enable</S>
          <Obj N="takes_args" RefId="12997">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="12998">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="12999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_find" RefId="13001">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for OTP token.</S>
          <Obj N="takes_options" RefId="13002">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13003">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13006">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">type</S>
                  <S N="cli_metavar">['totp', 'hotp', 'TOTP', 'HOTP']</S>
                  <S N="default">totp</S>
                  <Obj N="values" RefId="13007">
                    <TNRef RefId="1" />
                    <LST>
                      <S>totp</S>
                      <S>hotp</S>
                      <S>TOTP</S>
                      <S>HOTP</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13009">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">Type of the token</S>
                </MS>
              </Obj>
              <Obj RefId="13010">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token description (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13012">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13013">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">owner</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Assigned user of the token (default: self)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenowner</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13014">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Owner</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13016">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="13017">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokendisabled</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Mark the token as disabled (default: false)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13019">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13021">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_before</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokennotbefore</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13023">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity start</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13024">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">not_after</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last date/time the token can be used</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokennotafter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13026">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Validity end</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13027">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">vendor</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token vendor name (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenvendor</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13029">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Vendor</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13030">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">model</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token model (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenmodel</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13031">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Model</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13033">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">serial</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Token serial (informational only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenserial</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Serial</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13036">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">algo</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenotpalgorithm</S>
                  <S N="cli_metavar">['sha1', 'sha256', 'sha384', 'sha512']</S>
                  <S N="default">sha1</S>
                  <Obj N="values" RefId="13037">
                    <TNRef RefId="1" />
                    <LST>
                      <S>sha1</S>
                      <S>sha256</S>
                      <S>sha384</S>
                      <S>sha512</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Token hash algorithm</S>
                </MS>
              </Obj>
              <Obj RefId="13040">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">digits</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Digits</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IntEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenotpdigits</S>
                  <S N="cli_metavar">['6', '8']</S>
                  <I32 N="default">6</I32>
                  <Obj N="values" RefId="13041">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>6</I32>
                      <I32>8</I32>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Number of digits each token code will have</S>
                </MS>
              </Obj>
              <Obj RefId="13044">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">offset</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13045">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Clock offset</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotpclockoffset</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">TOTP token / FreeIPA server time difference</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="13046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13047">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">interval</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Clock interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotptimestep</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">30</I32>
                  <S N="doc">Length of TOTP token code validity</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">5</I32>
                  <Obj N="flags" RefId="13049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13050">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">counter</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13051">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Counter</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenhotpcounter</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">Initial counter for the HOTP token</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13053">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13055">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13056">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13057">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13059">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13060">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13061">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13062">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13063">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13064">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13065">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13066">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13067">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13069">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13070">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13071">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13075">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13076">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13080">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13081">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13082">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("id")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13083">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13084">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_find</S>
          <Obj N="takes_args" RefId="13086">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13087">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="pwpolicy_add" RefId="13090">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new group password policy.</S>
          <Obj N="takes_options" RefId="13091">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13092">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13093">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max lifetime (days)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbmaxpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum password lifetime (in days)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">20000</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13095">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlife</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min lifetime (hours)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbminpwdlife</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum password lifetime (in hours)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13098">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">history</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">History size</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdhistorylength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Password history size</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13100">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13101">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minclasses</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13102">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Character classes</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmindiffchars</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum number of character classes</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">5</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13103">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13104">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minlength</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Min length</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdminlength</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Minimum length of password</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13106">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13107">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cospriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the policy (higher number means lower priority</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13110">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">maxfail</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Max failures</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdmaxfailure</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Consecutive failures before lockout</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13113">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">failinterval</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Failure reset interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdfailurecountinterval</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period after which failure count will be reset (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13116">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">lockouttime</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13117">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Lockout duration</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">krbpwdlockoutduration</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Period for which lockout is enforced (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13118">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13119">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13120">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13121">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13122">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13123">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13124">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13125">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13127">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13128">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13131">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13132">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13133">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13134">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13136">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13138">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13139">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13141">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13142">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pwpolicy_add</S>
          <Obj N="takes_args" RefId="13143">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13144">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage password policy for specific group</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13145">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmd_find" RefId="13147">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for Sudo Commands.</S>
          <Obj N="takes_options" RefId="13148">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13149">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13150">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13151">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13152">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this command</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13155">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13157">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13161">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13162">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13163">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13166">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13167">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13168">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13170">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13173">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13174">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13177">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13178">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13179">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13180">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13183">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13184">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("command")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13185">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmd_find</S>
          <Obj N="takes_args" RefId="13188">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13189">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13190">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_show" RefId="13192">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a vault.</S>
          <Obj N="takes_options" RefId="13193">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13194">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13195">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13199">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13201">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13202">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13203">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13204">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13205">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13207">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13210">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13211">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13215">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13216">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13217">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13220">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13222">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13226">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13227">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13231">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_show</S>
          <Obj N="takes_args" RefId="13232">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13233">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="13235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_add_host" RefId="13236">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add target hosts and hostgroups to a CA ACL.</S>
          <Obj N="takes_options" RefId="13237">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13238">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13239">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13240">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13241">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13243">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13244">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13245">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13246">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13247">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13249">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13250">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13251">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13254">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13255">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13256">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13257">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13260">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13261">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13262">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13263">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_add_host</S>
          <Obj N="takes_args" RefId="13266">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13267">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13268">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverridegroup_find" RefId="13270">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an Group ID override.</S>
          <Obj N="takes_options" RefId="13271">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13272">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13273">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13275">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13277">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13278">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="13280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="13281">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="13283">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13284">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13285">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13286">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13287">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13289">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13290">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13291">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13292">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13293">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13295">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13296">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13298">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13301">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13302">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13303">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13306">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13307">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13311">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13312">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("anchor")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13313">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverridegroup_find</S>
          <Obj N="takes_args" RefId="13316">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13317">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13318">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13320">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13321">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13322">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_mod" RefId="13323">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a stage user.</S>
          <Obj N="takes_options" RefId="13324">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13325">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13327">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13328">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13331">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13332">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13333">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13334">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">displayname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13336">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13337">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">initials</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13339">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13340">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13341">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13343">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13344">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13346">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13349">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13350">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13352">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13353">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13354">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13355">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13358">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13359">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13361">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13363">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13364">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13365">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">random</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13366">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;random&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">random</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Generate a random user password</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13368">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13369">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13370">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="13372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13373">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13374">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="13375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13376">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13377">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13379">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13380">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13382">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13385">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13388">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13391">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13394">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13395">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13397">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13400">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13401">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13403">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13405">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13406">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13409">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13410">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13412">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sshpubkey</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">SSH public key</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasshpubkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13413">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">SSH public key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13415">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="13417">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13419">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13420">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13422">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13423">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13425">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13426">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13427">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13428">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13430">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13431">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13434">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13436">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13437">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13440">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13441">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13443">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13447">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13448">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13451">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13454">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13455">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13456">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13460">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13461">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13466">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13467">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13468">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13472">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13476">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13477">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13480">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13481">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13482">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Rename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Rename the stage user object</S>
                  <Obj N="flags" RefId="13484">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_mod</S>
          <Obj N="takes_args" RefId="13485">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13486">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13487">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="13488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_mod" RefId="13489">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a permission.</S>
          <Obj N="takes_options" RefId="13490">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13491">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13492">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">right</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['read', 'search', 'compare', 'write', 'add', 'delete', 'all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipapermright</S>
                  <S N="doc">Rights to grant (read, search, compare, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Granted rights</S>
                  <Obj N="values" RefId="13493">
                    <TNRef RefId="1" />
                    <LST>
                      <S>read</S>
                      <S>search</S>
                      <S>compare</S>
                      <S>write</S>
                      <S>add</S>
                      <S>delete</S>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13494">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13495">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All attributes to which the permission applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13496">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Effective attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13498">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">includedattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User-specified attributes to which the permission applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermincludedattr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Included attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13501">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">excludedattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User-specified attributes to which the permission explicitly does not apply</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermexcludedattr</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13502">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Excluded attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13504">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">bindtype</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Bind rule type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipapermbindruletype</S>
                  <S N="cli_metavar">['permission', 'all', 'anonymous']</S>
                  <S N="default">permission</S>
                  <Obj N="values" RefId="13505">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>all</S>
                      <S>anonymous</S>
                    </LST>
                  </Obj>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <S N="doc">Bind rule type</S>
                </MS>
              </Obj>
              <Obj RefId="13508">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNORURL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply permissions to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNOrURL</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13511">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Extra target filter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">extratargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13513">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Extra target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13514">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rawfilter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All target filters, including those implied by type and memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13516">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Raw target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13517">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">target</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN to apply the permission to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtarget</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13520">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetto</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree where an entry can be moved to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetto</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13522">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13523">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetfrom</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree from where an entry can be moved (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetfrom</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Origin DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13526">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Target members of a group (sets memberOf targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13527">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Member of group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13529">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group to apply permissions to (sets target)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13530">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13532">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Type of IPA object (sets subtree and objectClass targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">type</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13535">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use extratargetfilter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;filter&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13538">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermlocation</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13539">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;subtree&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13541">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermright</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13542">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13543">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;permissions&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13544">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13547">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13548">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13552">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13553">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13556">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13557">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13558">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13561">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13562">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13563">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13565">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13567">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13568">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13573">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13574">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13575">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13577">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13578">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13580">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13581">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13583">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., and space</S>
                  <S N="cli_name">rename</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Rename</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">rename</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Rename the permission object</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_mod</S>
          <Obj N="takes_args" RefId="13586">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13587">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13589">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_add_cert" RefId="13590">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add one or more certificates to the user entry</S>
          <Obj N="takes_options" RefId="13591">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13592">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13593">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13594">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13596">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13598">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13599">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13601">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13603">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13604">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13605">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13606">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13608">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13609">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13612">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13614">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13616">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_add_cert</S>
          <Obj N="takes_args" RefId="13617">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13618">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="13620">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="location_find" RefId="13621">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for IPA locations.</S>
          <Obj N="takes_options" RefId="13622">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13623">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Location name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">IPA location name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13626">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">description</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA Location description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13627">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13629">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13631">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13632">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13635">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13636">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13641">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13642">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13643">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13645">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13647">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13651">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13652">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13655">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">location_find</S>
          <Obj N="takes_args" RefId="13656">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13657">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13659">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_add" RefId="13660">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Allow access from the trusted domain</S>
          <Obj N="takes_options" RefId="13661">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13662">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">flat_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain NetBIOS name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipantflatname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13663">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain NetBIOS name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13665">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain Security Identifier</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain Security Identifier</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13668">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13669">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13672">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13675">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13676">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Trust type (ad for Active Directory, default)</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">trust_type</S>
                  <S N="cli_metavar">['ad']</S>
                  <S N="default">ad</S>
                  <Obj N="values" RefId="13677">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ad</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Trust type (ad for Active Directory, default)</S>
                </MS>
              </Obj>
              <Obj RefId="13680">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13681">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13685">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13687">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13688">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13692">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13693">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13694">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_add</S>
          <Obj N="takes_args" RefId="13696">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13697">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13698">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13700">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_add_member" RefId="13703">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add member to a named service delegation rule.</S>
          <Obj N="takes_options" RefId="13704">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13705">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13706">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13707">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13708">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13711">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13712">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13714">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13717">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13718">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13719">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13720">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13721">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13722">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13724">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13727">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">principals</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">principal to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member principal</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_add_member</S>
          <Obj N="takes_args" RefId="13730">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13731">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13732">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="13733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otptoken_del" RefId="13734">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete an OTP token.</S>
          <Obj N="takes_options" RefId="13735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13736">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13737">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13738">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13740">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13741">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13742">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13744">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otptoken_del</S>
          <Obj N="takes_args" RefId="13745">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13746">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">id</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Unique ID</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenuniqueid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13747">
                    <TNRef RefId="1" />
                    <LST>
                      <S>optional_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Unique ID</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_mod" RefId="13749">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a netgroup.</S>
          <Obj N="takes_options" RefId="13750">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13751">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Netgroup description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13754">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">nisdomain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NIS domain name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nisdomainname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NIS domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13755">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13757">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="13759">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13761">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="13763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13764">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13765">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13768">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13770">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13772">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13774">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13777">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13778">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13779">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13780">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13781">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13782">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13783">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13785">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13786">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13787">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13788">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13790">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13791">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13792">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13793">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13796">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13797">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13798">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13799">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13801">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13802">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13803">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13804">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13806">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_mod</S>
          <Obj N="takes_args" RefId="13807">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13808">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvcgroup_show" RefId="13811">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an HBAC service group.</S>
          <Obj N="takes_options" RefId="13812">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13813">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13814">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13818">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13819">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13824">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13825">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13826">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13827">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13829">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13830">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13833">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13834">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13835">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13836">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13839">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvcgroup_show</S>
          <Obj N="takes_args" RefId="13840">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13841">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service group name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service group name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_find" RefId="13844">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for CA ACLs.</S>
          <Obj N="takes_options" RefId="13845">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13846">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13847">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13849">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13850">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13852">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="13853">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13856">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13857">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cacat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacacategory</S>
                  <S N="doc">CA category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CA category</S>
                  <Obj N="values" RefId="13859">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13861">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13862">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">profilecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacertprofilecategory</S>
                  <S N="doc">Profile category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Profile category</S>
                  <Obj N="values" RefId="13863">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13865">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="13867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13869">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13870">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="13871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13873">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="13874">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="13875">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="13876">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13877">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13878">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13880">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13881">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="13882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13883">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13884">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13888">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13889">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13890">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13891">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13893">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13894">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13895">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13899">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13900">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13901">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13902">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13904">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13905">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13906">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="13907">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_find</S>
          <Obj N="takes_args" RefId="13910">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13911">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="realmdomains_mod" RefId="13914">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Modify realm domains_x000A__x000A_ DNS check: When manually adding a domain to the list, a DNS check is_x000A_ performed by default. It ensures that the domain is associated with_x000A_ the IPA realm, by checking whether the domain has a _kerberos TXT record_x000A_ containing the IPA realm name. This check can be skipped by specifying_x000A_ --force option._x000A__x000A_ Removal: when a realm domain which has a matching DNS zone managed by_x000A_ IPA is being removed, a corresponding _kerberos TXT record in the zone is_x000A_ removed automatically as well. Other records in the zone or the zone_x000A_ itself are not affected._x000A_ </S>
          <Obj N="takes_options" RefId="13915">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13916">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">associateddomain</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13917">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13919">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">add_domain</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Add domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">add_domain</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Add domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13922">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">del_domain</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delete domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">del_domain</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="13923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="13924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delete domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="13925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13933">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13934">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13936">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13937">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13938">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13939">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13941">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13942">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="13943">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force adding domain even if not in DNS</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13944">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13947">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13948">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13950">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13951">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13952">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13953">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13954">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13955">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13957">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13958">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13959">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13960">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13961">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13962">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">realmdomains_mod</S>
          <Obj N="takes_args" RefId="13963">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_undel" RefId="13964">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Undelete a delete user account.</S>
          <Obj N="takes_options" RefId="13965">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13966">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_undel</S>
          <Obj N="takes_args" RefId="13970">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13971">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="13972">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="13973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_add_principal" RefId="13974">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new principal alias to host entry</S>
          <Obj N="takes_options" RefId="13975">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13976">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13977">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13982">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13983">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13985">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13986">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13987">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13988">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="13989">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="13990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13991">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="13992">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="13993">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="13994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="13995">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="13996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="13997">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_add_principal</S>
          <Obj N="takes_args" RefId="13998">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="13999">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14000">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14001">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14002">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">krbprincipalname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_add_manager" RefId="14005">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a manager to the user entry</S>
          <Obj N="takes_options" RefId="14006">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14007">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14008">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14009">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14010">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14012">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14013">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14014">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14017">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14019">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14023">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14024">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14027">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14029">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14031">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_add_manager</S>
          <Obj N="takes_args" RefId="14032">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14033">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="14035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_remove_member" RefId="14036">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Remove members from a privilege_x000A_ </S>
          <Obj N="takes_options" RefId="14037">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14038">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14039">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14040">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14041">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14042">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14044">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14045">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14046">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14047">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14050">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14051">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14052">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14053">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14054">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14055">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14056">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14058">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14059">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14060">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">roles to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14061">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_remove_member</S>
          <Obj N="takes_args" RefId="14063">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14064">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14065">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_add_principal" RefId="14067">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new principal alias to a service</S>
          <Obj N="takes_options" RefId="14068">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14069">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14070">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14075">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14076">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14080">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14081">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14082">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14083">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14085">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14086">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14087">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_add_principal</S>
          <Obj N="takes_args" RefId="14091">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14092">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14093">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14095">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Service principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14097">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_host" RefId="14098">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove hosts and hostgroups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="14099">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14100">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14101">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14102">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14112">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14113">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14115">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14116">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14117">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14119">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14121">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14122">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14125">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14128">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostmask</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">host masks of allowed hosts</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostmask</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14129">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host masks of allowed hosts</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_host</S>
          <Obj N="takes_args" RefId="14131">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14132">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14134">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_find" RefId="14135">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for DNS zones (SOA records).</S>
          <Obj N="takes_options" RefId="14136">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14137">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14138">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14140">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14141">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14143">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">zone_active</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14144">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Active zone</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnszoneactive</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Is zone active?</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14145">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14147">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14148">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14149">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14150">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14151">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="14153">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14154">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14155">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name_server</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Authoritative nameserver</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoamname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Authoritative nameserver domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">admin_email</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Administrator e-mail address</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="default"></S>
                  <S N="doc">Administrator e-mail address</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14161">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">serial</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14162">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA serial</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaserial</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SOA record serial number</S>
                  <B N="required">false</B>
                  <I64 N="maxvalue">4294967295</I64>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="14163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14164">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">refresh</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA refresh</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoarefresh</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">SOA record refresh time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14167">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">retry</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14168">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA retry</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaretry</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">900</I32>
                  <S N="doc">SOA record retry time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14170">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">expire</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA expire</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaexpire</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">1209600</I32>
                  <S N="doc">SOA record expire time</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14172">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14173">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">minimum</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14174">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA minimum</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoaminimum</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">3600</I32>
                  <S N="doc">How long should negative responses be cached</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14176">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records at zone apex</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14179">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">default_ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Default time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsdefaultttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live for records without explicit TTL definition</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14182">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="14184">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14185">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14186">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">update_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">BIND update policy</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsupdatepolicy</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">BIND update policy</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14189">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dynamic_update</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14190">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Dynamic update</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowdynupdate</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow dynamic updates.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14191">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14194">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_query</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow query</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowquery</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">any;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to issue queries</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14197">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_transfer</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Allow transfer</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowtransfer</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">none;</S>
                  <S N="doc">Semicolon separated list of IP addresses or networks which are allowed to transfer the zone</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14199">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14200">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_sync_ptr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14201">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow PTR sync</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowsyncptr</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Allow synchronization of forward (A, AAAA) and reverse (PTR) records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14202">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14205">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnssec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14206">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow in-line DNSSEC signing</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssecinlinesigning</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Allow inline DNSSEC signing of records in the zone</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14207">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14210">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">expected format: &lt;0-255&gt; &lt;0-255&gt; &lt;0-65535&gt; even-length_hexadecimal_digits_or_hyphen</S>
                  <S N="cli_name">nsec3param_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^\d+ \d+ \d+ (([0-9a-fA-F]{2})+|-)$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC3PARAM record</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsec3paramrecord</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NSEC3PARAM record for zone in format: hash_algorithm flags iterations salt</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14211">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14213">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14215">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14216">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14217">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14219">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">forward_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14220">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward zones only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">forward_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Search for forward zones only</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14223">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14224">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14225">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14227">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14228">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14230">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14231">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14232">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14233">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14235">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14236">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14237">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14240">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14241">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14243">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14244">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_find</S>
          <Obj N="takes_args" RefId="14245">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14246">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountlocation_show" RefId="14249">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display an automount location.</S>
          <Obj N="takes_options" RefId="14250">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14251">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14252">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14256">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14257">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14259">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14261">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14262">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14263">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14265">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14268">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14270">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14271">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountlocation_show</S>
          <Obj N="takes_args" RefId="14272">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14273">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14274">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="radiusproxy_show" RefId="14276">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a RADIUS proxy server.</S>
          <Obj N="takes_options" RefId="14277">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14278">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14279">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14280">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14281">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14283">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14284">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14285">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14286">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14288">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14289">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14290">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14291">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14292">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14293">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14294">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14295">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14296">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14297">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14298">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">radiusproxy_show</S>
          <Obj N="takes_args" RefId="14299">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14300">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14302">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_add_member" RefId="14303">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to a hostgroup.</S>
          <Obj N="takes_options" RefId="14304">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14305">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14306">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14307">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14311">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14312">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14313">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14317">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14318">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14320">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14321">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14322">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14327">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14328">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14329">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14330">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_add_member</S>
          <Obj N="takes_args" RefId="14333">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14334">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14336">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationtarget_add_member" RefId="14337">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add member to a named service delegation target.</S>
          <Obj N="takes_options" RefId="14338">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14339">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14340">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14341">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14345">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14346">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14347">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14348">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14350">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14351">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14353">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14355">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">principals</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">principal to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member principal</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationtarget_add_member</S>
          <Obj N="takes_args" RefId="14358">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14359">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14360">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="14361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add" RefId="14362">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create new Sudo Rule.</S>
          <Obj N="takes_options" RefId="14363">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14364">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14365">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14367">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14368">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14369">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14370">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14372">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14373">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="14374">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14375">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14376">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14377">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="14378">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14380">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14381">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cmdcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">cmdcategory</S>
                  <S N="doc">Command category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Command category</S>
                  <Obj N="values" RefId="14382">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14384">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14385">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasusercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasusercategory</S>
                  <S N="doc">RunAs User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs User category</S>
                  <Obj N="values" RefId="14386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14388">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasgroupcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasgroupcategory</S>
                  <S N="doc">RunAs Group category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs Group category</S>
                  <Obj N="values" RefId="14390">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14391">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14392">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">order</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Sudo order</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sudoorder</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">integer to order the Sudo rules</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14395">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the rule applies to (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externaluser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14396">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14397">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14398">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14400">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14401">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudorunasextuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14403">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14404">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternalgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External Group the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudorunasextgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14405">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14407">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14408">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14410">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14411">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14415">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14416">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14417">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14418">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14421">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14422">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14426">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14427">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14428">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14430">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14431">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14432">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add</S>
          <Obj N="takes_args" RefId="14437">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14438">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_conncheck" RefId="14441">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Check connection to remote IPA server.</S>
          <Obj N="takes_options" RefId="14442">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14443">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14445">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14446">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_conncheck</S>
          <Obj N="takes_args" RefId="14447">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14448">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14451">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">remote_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Remote IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">remote_cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14452">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Remote server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_remove_member" RefId="14454">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Remove members from a permission.</S>
          <Obj N="takes_options" RefId="14455">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14456">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14457">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14458">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14459">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14460">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14462">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14463">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14464">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14467">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14468">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14472">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14473">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14474">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14476">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14477">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14478">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">privileges</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">privileges to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">privilege</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14480">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member privilege</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_remove_member</S>
          <Obj N="takes_args" RefId="14481">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14482">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., :, /, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.:/]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14484">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_add_certmapdata" RefId="14485">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add one or more certificate mappings to the stage user entry.</S>
          <Obj N="takes_options" RefId="14486">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14487">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">issuer</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Issuer of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">issuer</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Issuer</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14490">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subject</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subject of the certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subject</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subject</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14493">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">certificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14495">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14496">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14497">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14498">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14501">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14502">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14503">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14504">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14505">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14508">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14509">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14510">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14511">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14512">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14513">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14515">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14516">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_add_certmapdata</S>
          <Obj N="takes_args" RefId="14518">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14519">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14520">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="14521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="14522">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">certmapdata</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate mapping data</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapdata</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate mapping data</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="krbtpolicy_show" RefId="14525">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the current Kerberos ticket policy.</S>
          <Obj N="takes_options" RefId="14526">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14527">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14528">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14530">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14532">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14533">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14535">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14536">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14537">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14538">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14539">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14540">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14541">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14544">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14545">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14546">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">krbtpolicy_show</S>
          <Obj N="takes_args" RefId="14548">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14549">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage ticket policy for specific user</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">uid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_disable" RefId="14552">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable a Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="14553">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14554">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14555">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14556">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_disable</S>
          <Obj N="takes_args" RefId="14558">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14559">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="servicedelegationrule_remove_member" RefId="14562">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove member from a named service delegation rule.</S>
          <Obj N="takes_options" RefId="14563">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14564">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14565">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14568">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14570">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14571">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14573">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14575">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14576">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14578">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14580">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14581">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14582">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14585">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14586">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">principals</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">principal to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">principal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member principal</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">servicedelegationrule_remove_member</S>
          <Obj N="takes_args" RefId="14589">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14590">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, ., and a space inside</S>
                  <S N="cli_name">delegation_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_ .-]*[a-zA-Z0-9_.-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Delegation name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Delegation name</S>
                  <Obj N="flags" RefId="14592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="ca_show" RefId="14593">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the properties of a CA.</S>
          <Obj N="takes_options" RefId="14594">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14595">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14596">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14597">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14599">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14600">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">chain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14601">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;chain&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">chain</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Include certificate chain in output</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14602">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14603">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14604">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14605">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14606">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14609">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14610">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14611">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14612">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14615">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14617">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14618">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">ca_show</S>
          <Obj N="takes_args" RefId="14621">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14622">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name for referencing the CA</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14624">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otpconfig_mod" RefId="14625">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify OTP configuration options.</S>
          <Obj N="takes_options" RefId="14626">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14627">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">totp_auth_window</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TOTP authentication Window</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotpauthwindow</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TOTP authentication time variance (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">5</I32>
                  <Obj N="flags" RefId="14629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14630">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">totp_sync_window</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14631">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TOTP Synchronization Window</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokentotpsyncwindow</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TOTP synchronization time variance (seconds)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">5</I32>
                  <Obj N="flags" RefId="14632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14633">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">hotp_auth_window</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">HOTP Authentication Window</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenhotpauthwindow</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">HOTP authentication skip-ahead</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="14635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14636">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">hotp_sync_window</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14637">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">HOTP Synchronization Window</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipatokenhotpsyncwindow</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">HOTP synchronization skip-ahead</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="14638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14639">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14641">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14643">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14645">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14646">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14647">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14650">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14651">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14652">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14655">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14656">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14657">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14658">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14660">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14661">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14662">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14663">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14664">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14666">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14667">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14668">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14669">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14671">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otpconfig_mod</S>
          <Obj N="takes_args" RefId="14672">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="automember_add_condition" RefId="14673">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_ Add conditions to an automember rule._x000A_ </S>
          <Obj N="takes_options" RefId="14674">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14675">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A description of this auto member rule</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14676">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14677">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14678">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">inclusive_regex</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Inclusive Regex</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automemberinclusiveregex</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14679">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14680">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Inclusive Regex</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14681">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">exclusive_regex</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Exclusive Regex</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automemberexclusiveregex</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14683">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Exclusive Regex</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14684">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attribute to filter via regex. For example fqdn for a host, or manager for a user</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">key</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14685">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14686">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attribute Key</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14687">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['group', 'hostgroup']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">Grouping to which the rule applies</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Grouping Type</S>
                  <Obj N="values" RefId="14689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>group</S>
                      <S>hostgroup</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="14690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14691">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14692">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14693">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14694">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14696">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14697">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14698">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14699">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14702">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14704">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14705">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automember_add_condition</S>
          <Obj N="takes_args" RefId="14707">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14708">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">automember_rule</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automember Rule</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14709">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14710">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Automember Rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hostgroup_del" RefId="14711">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a hostgroup.</S>
          <Obj N="takes_options" RefId="14712">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14713">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14714">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14715">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14717">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14718">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14720">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14721">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hostgroup_del</S>
          <Obj N="takes_args" RefId="14722">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14723">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">hostgroup_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Host-group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Name of host-group</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14725">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idrange_mod" RefId="14726">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify ID range._x000A__x000A_=======_x000A_WARNING:_x000A__x000A_DNA plugin in 389-ds will allocate IDs based on the ranges configured for the_x000A_local domain. Currently the DNA plugin *cannot* be reconfigured itself based_x000A_on the local ranges set via this family of commands._x000A__x000A_Manual configuration change has to be done in the DNA plugin configuration for_x000A_the new local range. Specifically, The dnaNextRange attribute of 'cn=Posix_x000A_IDs,cn=Distributed Numeric Assignment Plugin,cn=plugins,cn=config' has to be_x000A_modified to match the new range._x000A_=======_x000A__x000A_</S>
          <Obj N="takes_options" RefId="14727">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14728">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">base_id</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First Posix ID of the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaseid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First Posix ID of the range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="14730">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14731">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">range_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14732">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Number of IDs in the range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaidrangesize</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of IDs in the range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="14733">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14734">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14735">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the corresponding RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipabaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the corresponding RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="14736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14737">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">secondary_rid_base</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First RID of the secondary RID range</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipasecondarybaserid</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First RID of the secondary RID range</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="14739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14740">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14741">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14744">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14745">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14748">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14749">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14752">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14753">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14754">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14755">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14756">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14757">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">dom_sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain SID of the trusted domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14759">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain SID of the trusted domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14760">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">dom_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Name of the trusted domain</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipanttrusteddomainname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_option</S>
                      <S>no_search</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Name of the trusted domain</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">true</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14763">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14764">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14765">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14768">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14769">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14770">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14771">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14773">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14775">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14777">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14778">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idrange_mod</S>
          <Obj N="takes_args" RefId="14779">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14780">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Range name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Range name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selfservice_show" RefId="14783">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a self-service permission.</S>
          <Obj N="takes_options" RefId="14784">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14785">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14786">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14787">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14788">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14789">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14790">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14791">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14792">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14793">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14796">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14797">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14798">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14799">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selfservice_show</S>
          <Obj N="takes_args" RefId="14801">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14802">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Self-service name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aciname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Self-service name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14803">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14804">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_add" RefId="14805">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new netgroup.</S>
          <Obj N="takes_options" RefId="14806">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14807">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Netgroup description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14810">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">nisdomain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NIS domain name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">nisdomainname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NIS domain name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14813">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14814">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="14815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14817">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14818">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="14819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14820">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14821">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14824">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14827">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14828">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14829">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14830">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14831">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14832">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14833">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14834">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14835">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14836">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14838">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14839">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14840">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14841">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14843">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14844">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14845">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14848">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14849">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14851">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14853">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_add</S>
          <Obj N="takes_args" RefId="14854">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14855">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="14856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14857">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_show" RefId="14858">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show IPA server.</S>
          <Obj N="takes_options" RefId="14859">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14860">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14861">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14863">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14865">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14866">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14867">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14870">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14871">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14872">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14873">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14877">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14879">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14880">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14881">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14882">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14883">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14885">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_show</S>
          <Obj N="takes_args" RefId="14887">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14888">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14889">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_mod" RefId="14891">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a CA ACL.</S>
          <Obj N="takes_options" RefId="14892">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14893">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14894">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14895">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14896">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="14897">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="14898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14900">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14901">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cacat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacacategory</S>
                  <S N="doc">CA category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CA category</S>
                  <Obj N="values" RefId="14903">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14904">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14905">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">profilecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipacertprofilecategory</S>
                  <S N="doc">Profile category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Profile category</S>
                  <Obj N="values" RefId="14907">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14909">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="14911">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14913">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="14915">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14917">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">servicecat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">servicecategory</S>
                  <S N="doc">Service category the ACL applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service category</S>
                  <Obj N="values" RefId="14919">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14921">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14922">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14926">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14929">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14932">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14933">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="14934">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14935">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14936">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14938">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14939">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14940">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14941">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14945">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14947">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14948">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14950">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14954">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14955">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14957">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14959">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_mod</S>
          <Obj N="takes_args" RefId="14960">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14961">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_find" RefId="14964">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for IPA services.</S>
          <Obj N="takes_options" RefId="14965">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="14966">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14967">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14969">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14972">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="14973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">pac_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['MS-PAC', 'PAD', 'NONE']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipakrbauthzdata</S>
                  <S N="doc">Override default list of supported PAC types. Use 'NONE' to disable PAC support for this service, e.g. this might be necessary for NFS services.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PAC type</S>
                  <Obj N="values" RefId="14974">
                    <TNRef RefId="1" />
                    <LST>
                      <S>MS-PAC</S>
                      <S>PAD</S>
                      <S>NONE</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="14975">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14976">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">auth_ind</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Defines a whitelist for Authentication Indicators. Use 'otp' to allow OTP-based 2FA authentications. Use 'radius' to allow RADIUS-based 2FA authentications. Other values may be used for custom configurations.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalauthind</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="14977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="14978">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Authentication Indicators</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="14979">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14982">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="14984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14985">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14986">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14987">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14988">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14990">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14991">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="14992">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="14993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="14994">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="14995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="14996">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="14997">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="14998">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="14999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15000">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15001">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15002">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15003">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15004">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15006">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15007">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15008">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("canonical-principal")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15009">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15012">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">man_by_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for services with these managed by hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">man_by_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15014">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15015">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_man_by_hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for services without these managed by hosts.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_man_by_host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15017">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_find</S>
          <Obj N="takes_args" RefId="15018">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15019">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_remove_user" RefId="15022">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove users and groups from an HBAC rule.</S>
          <Obj N="takes_options" RefId="15023">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15024">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15025">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15027">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15028">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15030">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15031">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15032">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15035">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15036">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15037">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15040">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15041">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15042">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15045">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15046">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15047">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15048">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15049">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15051">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_remove_user</S>
          <Obj N="takes_args" RefId="15052">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15053">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15055">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_show" RefId="15056">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a named group.</S>
          <Obj N="takes_options" RefId="15057">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15058">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15059">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15060">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15061">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15063">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15064">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15065">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15066">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15068">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15069">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15070">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15071">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15074">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15075">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15076">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15077">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15079">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15080">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15081">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15082">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15083">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_show</S>
          <Obj N="takes_args" RefId="15085">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15086">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15087">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="15088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_add" RefId="15089">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new segment.</S>
          <Obj N="takes_options" RefId="15090">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15091">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, -, . and $</S>
                  <S N="cli_name">leftnode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9.][a-zA-Z0-9.-]*[a-zA-Z0-9.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Left node</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentleftnode</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Left replication node - an IPA server</S>
                  <Obj N="flags" RefId="15093">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="15094">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, -, . and $</S>
                  <S N="cli_name">rightnode</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9.][a-zA-Z0-9.-]*[a-zA-Z0-9.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Right node</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentrightnode</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Right replication node - an IPA server</S>
                  <Obj N="flags" RefId="15096">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="15097">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">direction</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Connectivity</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">iparepltoposegmentdirection</S>
                  <S N="cli_metavar">['both', 'left-right', 'right-left']</S>
                  <S N="default">both</S>
                  <Obj N="values" RefId="15098">
                    <TNRef RefId="1" />
                    <LST>
                      <S>both</S>
                      <S>left-right</S>
                      <S>right-left</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15100">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_update</S>
                    </LST>
                  </Obj>
                  <S N="doc">Direction of replication between left and right replication node</S>
                </MS>
              </Obj>
              <Obj RefId="15101">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">stripattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A space separated list of attributes which are removed from replication updates.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicastripattrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15102">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15103">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to strip</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15104">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a fractional update. E.g., `(objectclass=*) $ EXCLUDE accountlockout memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicatedattributelist</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15105">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15106">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes to replicate</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15107">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">replattrstotal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes that are not replicated to a consumer server during a total update. E.g. (objectclass=*) $ EXCLUDE accountlockout</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">nsds5replicatedattributelisttotal</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15109">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Attributes for total update</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15110">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timeout</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Session timeout</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsds5replicatimeout</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Number of seconds outbound LDAP operations waits for a response from the remote replica before timing out and failing</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="15112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15113">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">enabled</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['on', 'off']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">nsds5replicaenabled</S>
                  <S N="doc">Whether a replication agreement is active, meaning whether replication is occurring per that agreement</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Replication agreement enabled</S>
                  <Obj N="values" RefId="15115">
                    <TNRef RefId="1" />
                    <LST>
                      <S>on</S>
                      <S>off</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15116">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15117">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15119">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15121">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15122">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15125">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15126">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15127">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15128">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15131">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15132">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15133">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15134">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15135">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15136">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15137">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15138">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15139">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_add</S>
          <Obj N="takes_args" RefId="15141">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15142">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15143">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15144">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15145">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15147">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_mod" RefId="15148">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify Sudo Rule.</S>
          <Obj N="takes_options" RefId="15149">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15150">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15151">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15153">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="15154">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15155">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15157">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15158">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15159">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">usercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">usercategory</S>
                  <S N="doc">User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User category</S>
                  <Obj N="values" RefId="15160">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15162">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">hostcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">hostcategory</S>
                  <S N="doc">Host category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Host category</S>
                  <Obj N="values" RefId="15164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15166">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">cmdcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">cmdcategory</S>
                  <S N="doc">Command category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Command category</S>
                  <Obj N="values" RefId="15168">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15170">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasusercat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasusercategory</S>
                  <S N="doc">RunAs User category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs User category</S>
                  <Obj N="values" RefId="15172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15174">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">runasgroupcat</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['all']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipasudorunasgroupcategory</S>
                  <S N="doc">RunAs Group category the rule applies to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">RunAs Group category</S>
                  <Obj N="values" RefId="15176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15178">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">order</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Sudo order</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sudoorder</S>
                  <S N="cli_metavar">INT</S>
                  <I32 N="default">0</I32>
                  <S N="doc">integer to order the Sudo rules</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="15180">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15181">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the rule applies to (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externaluser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15182">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15184">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">externalhost</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External host</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">externalhost</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15185">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15186">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">External host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15187">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternaluser</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External User the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudorunasextuser</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15189">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15190">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">runasexternalgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">External Group the commands can run as (sudorule-find only)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudorunasextgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RunAs External Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15193">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15194">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15195">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15197">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15198">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15199">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15200">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15201">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15202">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15205">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15206">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15207">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15210">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15211">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15212">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15213">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15214">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15215">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15216">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15217">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15219">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15220">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15221">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15222">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15226">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15227">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15228">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15231">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15232">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">rename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rename the sudo rule object</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">rename</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rename</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_mod</S>
          <Obj N="takes_args" RefId="15235">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15236">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15237">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15238">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_detach" RefId="15239">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Detach a managed group from a user.</S>
          <Obj N="takes_options" RefId="15240">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15241">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15243">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15244">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_detach</S>
          <Obj N="takes_args" RefId="15245">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15246">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15247">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="15248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_show" RefId="15249">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an ID View.</S>
          <Obj N="takes_options" RefId="15250">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15251">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15252">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15253">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15256">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">show_hosts</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15257">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;show_hosts&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">show_hosts</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Enumerate all the hosts the view applies to.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15261">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15262">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15263">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15265">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15266">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15267">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15268">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15269">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15271">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15272">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15273">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15274">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15276">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_show</S>
          <Obj N="takes_args" RefId="15277">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15278">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15280">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="aci_find" RefId="15281">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">_x000A_ Search for ACIs._x000A__x000A_ Returns a list of ACIs_x000A__x000A_ EXAMPLES:_x000A__x000A_ To find all ACIs that apply directly to members of the group ipausers:_x000A_ ipa aci-find --memberof=ipausers_x000A__x000A_ To find all ACIs that grant add access:_x000A_ ipa aci-find --permissions=add_x000A__x000A_ Note that the find command only looks for the given text in the set of_x000A_ ACIs, it does not evaluate the ACIs to see if something would apply._x000A_ For example, searching on memberof=ipausers will find all ACIs that_x000A_ have ipausers as a memberof. There may be other ACIs that apply to_x000A_ members of that group indirectly._x000A_ </S>
          <Obj N="takes_options" RefId="15282">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15283">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACI name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15284">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15285">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACI name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15286">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permission</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permission ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15287">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15289">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15290">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15292">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant(read, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15293">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15295">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15296">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15297">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes to which the permission applies</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15298">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['user', 'group', 'host', 'service', 'hostgroup', 'netgroup', 'dnsrecord']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">type</S>
                  <S N="doc">type of IPA object (user, group, host, hostgroup, service, netgroup)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Type</S>
                  <Obj N="values" RefId="15300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>user</S>
                      <S>group</S>
                      <S>host</S>
                      <S>service</S>
                      <S>hostgroup</S>
                      <S>netgroup</S>
                      <S>dnsrecord</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="15301">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15302">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Member of a group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15303">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15304">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member of</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15305">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Legal LDAP filter (e.g. ou=Engineering)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15306">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15308">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Subtree to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15309">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15311">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group to apply ACI to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15312">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15313">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15314">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">self</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="15315">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Target your own entry (self)</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">selfaci</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Apply ACI to your own entry (self)</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15318">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15319">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">prefix</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['permission', 'delegation', 'selfservice', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">aciprefix</S>
                  <S N="doc">Prefix used to distinguish ACI types (permission, delegation, selfservice, none)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">ACI prefix</S>
                  <Obj N="values" RefId="15321">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>delegation</S>
                      <S>selfservice</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="15322">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15323">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15324">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15327">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15328">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15329">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15330">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15332">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15333">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15334">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15335">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15337">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15340">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15341">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15342">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15343">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">aci_find</S>
          <Obj N="takes_args" RefId="15344">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15345">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15346">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="pwpolicy_show" RefId="15348">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about password policy.</S>
          <Obj N="takes_options" RefId="15349">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15350">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15351">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15352">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15353">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15354">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15355">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display effective policy for a specific user</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15357">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15358">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15359">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15363">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15364">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15365">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15368">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15369">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15370">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15371">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15373">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">pwpolicy_show</S>
          <Obj N="takes_args" RefId="15374">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15375">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manage password policy for specific group</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15377">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_del" RefId="15378">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete IPA server.</S>
          <Obj N="takes_options" RefId="15379">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15380">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15381">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15382">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15385">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ignore_topology_disconnect</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15386">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Ignore topology errors</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">ignore_topology_disconnect</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Ignore topology connectivity problems after removal</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15387">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15389">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15390">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ignore_last_of_role</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15391">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Ignore check for last remaining CA or DNS server</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">ignore_last_of_role</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Skip a check whether the last CA master or DNS server is removed</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15392">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15393">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15395">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15396">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force server removal</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Force server removal even if it does not exist</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15401">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_del</S>
          <Obj N="takes_args" RefId="15404">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15405">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountkey_show" RefId="15408">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display an automount key.</S>
          <Obj N="takes_options" RefId="15409">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15410">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15411">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15412">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15413">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15415">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">key</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount key name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountkey</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Key</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15418">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">info</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mount information</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountinformation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15420">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mount information</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15421">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15422">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15424">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15426">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15427">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15428">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15429">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15430">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15431">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15432">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15433">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15434">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15435">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountkey_show</S>
          <Obj N="takes_args" RefId="15437">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15438">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15439">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15441">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountmap</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountmapautomountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15442">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsserver_mod" RefId="15444">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify DNS server configuration</S>
          <Obj N="takes_options" RefId="15445">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15446">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">soa_mname_override</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SOA mname override</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnssoamname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">SOA mname (authoritative server) override</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15447">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15448">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15449">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-server forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15450">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15451">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15452">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-server conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="15454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15456">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15457">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15460">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15461">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15463">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15464">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15466">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15468">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15469">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15470">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15471">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15472">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15473">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15474">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15478">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15479">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15480">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15481">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15482">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15484">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15485">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15487">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsserver_mod</S>
          <Obj N="takes_args" RefId="15489">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15490">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">DNS Server name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idnsserverid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15492">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selfservice_find" RefId="15493">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for a self-service permission.</S>
          <Obj N="takes_options" RefId="15494">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15495">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Self-service name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aciname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Self-service name</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15496">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15498">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15499">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15500">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15501">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the permission applies.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15502">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15504">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15505">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15507">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15508">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15509">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15510">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15511">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15512">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15513">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15515">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15516">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15517">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15520">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15521">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15523">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15524">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selfservice_find</S>
          <Obj N="takes_args" RefId="15525">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15526">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_runasuser" RefId="15529">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users and groups for Sudo to execute as.</S>
          <Obj N="takes_options" RefId="15530">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15531">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15532">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15535">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15537">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15538">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15539">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15540">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15541">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15542">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15543">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15544">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15547">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15548">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15550">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15551">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15552">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15553">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15556">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_runasuser</S>
          <Obj N="takes_args" RefId="15559">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15560">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15562">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sidgen_was_run" RefId="15563">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Determine whether ipa-adtrust-install has been run with sidgen task</S>
          <Obj N="takes_options" RefId="15564">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15566">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sidgen_was_run</S>
          <Obj N="takes_args" RefId="15569">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="command_defaults" RefId="15570">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <Nil N="doc" />
          <Obj N="takes_options" RefId="15571">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15572">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">params</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;params&gt;</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">params</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15573">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15574">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;params&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15575">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15576">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">kw</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DICT</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">&lt;kw&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">kw</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15577">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;kw&gt;</S>
                  <S N="type">dict</S>
                  <S N="class">Dict</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15578">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15580">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15581">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">command_defaults</S>
          <Obj N="takes_args" RefId="15582">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15583">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">full_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">full_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15584">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15585">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_show" RefId="15586">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display the properties of an HBAC rule.</S>
          <Obj N="takes_options" RefId="15587">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15588">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15589">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15590">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15593">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15594">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15595">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15597">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15598">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15599">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15600">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15601">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15602">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15603">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15604">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15605">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15607">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15609">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15610">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15612">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15614">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_show</S>
          <Obj N="takes_args" RefId="15615">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15616">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15617">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="server_mod" RefId="15619">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify information about an IPA server.</S>
          <Obj N="takes_options" RefId="15620">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15621">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">location</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Location</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipalocation_location</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Server location</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15623">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15624">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">service_weight</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Service weight</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaserviceweight</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Weight for server services</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="15626">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15627">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15628">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15629">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15630">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15631">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15635">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15636">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15637">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15638">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15639">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15640">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15641">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15642">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15644">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15645">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15646">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15648">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15649">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15650">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15651">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15653">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15654">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15655">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15656">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15657">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15660">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15661">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15663">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">server_mod</S>
          <Obj N="takes_args" RefId="15666">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15667">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IPA server hostname</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15669">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Server name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="domainlevel_get" RefId="15670">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Query current Domain Level.</S>
          <Obj N="takes_options" RefId="15671">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15672">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15673">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15675">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">domainlevel_get</S>
          <Obj N="takes_args" RefId="15676">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="compat_is_enabled" RefId="15677">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Determine whether Schema Compatibility plugin is configured to serve trusted domain users and groups</S>
          <Obj N="takes_options" RefId="15678">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15679">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15680">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15681">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">compat_is_enabled</S>
          <Obj N="takes_args" RefId="15683">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_enable" RefId="15684">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Allow use of IPA resources by the domain of the trust</S>
          <Obj N="takes_options" RefId="15685">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15687">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_enable</S>
          <Obj N="takes_args" RefId="15690">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15691">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15692">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15693">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15694">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15695">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15696">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvc_show" RefId="15697">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an HBAC service.</S>
          <Obj N="takes_options" RefId="15698">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15699">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15700">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15701">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15704">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15705">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15706">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15707">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15708">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15709">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15710">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15711">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15712">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15714">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15715">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15716">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15717">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15721">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvc_show</S>
          <Obj N="takes_args" RefId="15726">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15727">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15729">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountlocation_tofiles" RefId="15730">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Generate automount files for a specific location.</S>
          <Obj N="takes_options" RefId="15731">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15732">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15733">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15735">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountlocation_tofiles</S>
          <Obj N="takes_args" RefId="15736">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15737">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idoverridegroup_add" RefId="15740">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new Group ID override.</S>
          <Obj N="takes_options" RefId="15741">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15742">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15745">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="15747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="15748">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15749">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="15750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15751">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15752">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15753">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15754">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15755">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15758">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15759">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">fallback_to_ldap</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15760">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Fallback to AD DC LDAP</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">fallback_to_ldap</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow falling back to AD DC LDAP when resolving AD trusted objects. For two-way trusts only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="15761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15762">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15764">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15765">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15767">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15768">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15770">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15771">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15773">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15774">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15775">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15776">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15777">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15778">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15779">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idoverridegroup_add</S>
          <Obj N="takes_args" RefId="15780">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15781">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">idview</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">idviewcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15783">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15784">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">anchor</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Anchor to override</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipaanchoruuid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15786">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Anchor to override</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="permission_add" RefId="15787">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new permission.</S>
          <Obj N="takes_options" RefId="15788">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15789">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">right</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['read', 'search', 'compare', 'write', 'add', 'delete', 'all']</S>
                  <B N="alwaysask">true</B>
                  <S N="name">ipapermright</S>
                  <S N="doc">Rights to grant (read, search, compare, write, add, delete, all)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Granted rights</S>
                  <Obj N="values" RefId="15791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>read</S>
                      <S>search</S>
                      <S>compare</S>
                      <S>write</S>
                      <S>add</S>
                      <S>delete</S>
                      <S>all</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15792">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15793">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All attributes to which the permission applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15795">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Effective attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15796">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">bindtype</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Bind rule type</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipapermbindruletype</S>
                  <S N="cli_metavar">['permission', 'all', 'anonymous']</S>
                  <S N="default">permission</S>
                  <Obj N="values" RefId="15797">
                    <TNRef RefId="1" />
                    <LST>
                      <S>permission</S>
                      <S>all</S>
                      <S>anonymous</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15798">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15799">
                    <TNRef RefId="1" />
                    <LST>
                      <S>allow_mod_for_managed_permission</S>
                    </LST>
                  </Obj>
                  <S N="doc">Bind rule type</S>
                </MS>
              </Obj>
              <Obj RefId="15800">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNORURL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Subtree to apply permissions to</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermlocation</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15802">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNOrURL</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15803">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Extra target filter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">extratargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15804">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Extra target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15806">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rawfilter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">All target filters, including those implied by type and memberof</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetfilter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15807">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15808">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Raw target filter</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15809">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">target</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN to apply the permission to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtarget</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15811">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15812">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetto</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree where an entry can be moved to (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetto</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15814">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Target DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15815">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">targetfrom</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Optional DN subtree from where an entry can be moved (must be in the subtree, but may not yet exist)</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipapermtargetfrom</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15817">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Origin DN subtree</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15818">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">memberof</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Target members of a group (sets memberOf targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15819">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15820">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Member of group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15821">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">targetgroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">User group to apply permissions to (sets target)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">targetgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15823">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Target group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15824">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Type of IPA object (sets subtree and objectClass targetfilter)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">type</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ask_create</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15827">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">filter</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use extratargetfilter</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">filter</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15829">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;filter&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15830">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">subtree</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermlocation</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">subtree</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;subtree&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15833">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Deprecated; use ipapermright</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15834">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15835">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">&lt;permissions&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15836">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15837">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15840">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15841">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15842">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15843">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15844">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15845">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15846">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15848">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15850">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15851">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15853">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15854">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15856">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15857">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15858">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15859">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15860">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15861">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15862">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15863">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15864">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">permission_add</S>
          <Obj N="takes_args" RefId="15866">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15867">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, ., and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9.]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Permission name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Permission name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_show" RefId="15870">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display Sudo Rule.</S>
          <Obj N="takes_options" RefId="15871">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15872">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="15873">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15875">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15876">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15877">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15878">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15880">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15881">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15883">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15884">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15886">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15888">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15889">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15890">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15892">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15893">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="15894">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="15895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="15896">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="15897">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15898">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_show</S>
          <Obj N="takes_args" RefId="15899">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15900">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_find" RefId="15903">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for users.</S>
          <Obj N="takes_options" RefId="15904">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="15905">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="15907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="15908">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">first</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">First name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">givenname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15909">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">First name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15911">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">last</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Last name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15913">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Last name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15914">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">cn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15916">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15917">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">displayname</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Display name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">displayname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15918">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15919">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Display name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15920">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">initials</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Initials</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">initials</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Initials</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15923">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">homedir</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Home directory</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">homedirectory</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15925">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Home directory</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15926">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">gecos</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">GECOS</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">gecos</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15927">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15928">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">GECOS</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15929">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">shell</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Login shell</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">loginshell</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15930">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15931">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Login shell</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15932">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15935">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15936">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Kerberos principal expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbprincipalexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15937">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Kerberos principal expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15938">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">password_expiration</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DATETIME</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User password expiration</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbpasswordexpiration</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15940">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">User password expiration</S>
                  <S N="type">datetime</S>
                  <S N="class">DateTime</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15941">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">email</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Email address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">mail</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15942">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15943">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Email address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15944">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">password</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="15945">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Password</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Password</S>
                  <B N="no_convert">false</B>
                  <S N="name">userpassword</S>
                  <S N="cli_metavar">PASSWORD</S>
                  <S N="doc">Prompt to set the user password</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="15946">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="15947">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15948">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">UID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">User ID Number (system will assign one if not provided)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="15950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15951">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gidnumber</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="15952">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Group ID Number</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="15953">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="15954">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">street</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Street address</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">street</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15956">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Street address</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15957">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">city</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">City</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">l</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15958">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15959">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">City</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15960">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">state</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">State/Province</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">st</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15961">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">State/Province</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15963">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">postalcode</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ZIP</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">postalcode</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15964">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15965">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ZIP</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15966">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">phone</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">telephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15967">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15969">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">mobile</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Mobile Telephone Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">mobile</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15970">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15971">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Mobile Telephone Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15972">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">pager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Pager Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">pager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15974">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Pager Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15975">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">fax</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Fax Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">facsimiletelephonenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15976">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Fax Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15978">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">orgunit</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Org. Unit</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ou</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15979">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15980">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Org. Unit</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15981">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">title</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Job Title</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">title</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Job Title</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15984">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">manager</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Manager</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">manager</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15985">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15986">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Manager</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15987">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">carlicense</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Car License</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">carlicense</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Car License</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15990">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="15991">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">user_auth_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['password', 'radius', 'otp']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">ipauserauthtype</S>
                  <S N="doc">Types of supported user authentication</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">User authentication types</S>
                  <Obj N="values" RefId="15992">
                    <TNRef RefId="1" />
                    <LST>
                      <S>password</S>
                      <S>radius</S>
                      <S>otp</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">true</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="15993">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">true</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15994">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User category (semantics placed on this attribute are for local interpretation)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">userclass</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Class</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="15997">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy configuration</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiusconfiglink</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="15998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="15999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy configuration</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16000">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">radius_username</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">RADIUS proxy username</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipatokenradiususername</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16001">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16002">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">RADIUS proxy username</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16003">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">departmentnumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Department Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">departmentnumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16005">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Department Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16006">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeenumber</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Number</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">employeenumber</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16007">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Number</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16009">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">employeetype</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Employee Type</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">employeetype</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16011">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Employee Type</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16012">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">must match RFC 2068 - 14.4, e.g., "da, en-gb;q=0.8, en;q=0.7"</S>
                  <S N="cli_name">preferredlanguage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^(([a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?(\s*,\s*[a-zA-Z]{1,8}(-[a-zA-Z]{1,8})?(;q\=((0(\.[0-9]{0,3})?)|(1(\.0{0,3})?)))?)*)|(\*))$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Preferred Language</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">preferredlanguage</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Preferred Language</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16013">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16014">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16015">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16016">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">certificate</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">CERTIFICATE</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Base-64 encoded user certificate</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">usercertificate</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16017">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Certificate</S>
                  <S N="type">Certificate</S>
                  <S N="class">Certificate</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16018">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">disabled</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="16019">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Account disabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsaccountlock</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Account disabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16022">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16023">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">preserved</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="16024">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Preserved user</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">preserved</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Preserved user</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16026">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16027">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                      <S>no_create</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16028">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16029">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16030">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16031">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16032">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16034">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">whoami</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16035">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Self</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">whoami</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display user record for current Kerberos principal</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16036">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16037">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16038">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16039">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16040">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16041">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16042">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16043">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16044">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16045">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16046">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16047">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16049">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16050">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16051">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16052">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16053">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16054">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16055">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16056">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16057">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16058">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16060">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16061">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16062">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("login")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16063">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16064">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16065">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16066">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for users with these member of groups.</S>
                  <Obj N="flags" RefId="16068">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="16069">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">not_in_groups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">group</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_group</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16070">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Search for users without these member of groups.</S>
                  <Obj N="flags" RefId="16071">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="16072">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for users with these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16075">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">not_in_netgroups</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">netgroup</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">not_in_netgroup</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Search for users without these member of netgroups.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16076">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16077">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16078">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users with these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16080">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16081">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_roles</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users without these member of roles.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_role</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16082">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16083">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">role</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16084">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users with these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16086">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16087">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_hbacrules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users without these member of HBAC rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_hbacrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16088">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">HBAC rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16090">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users with these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16091">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16092">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16093">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">not_in_sudorules</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Search for users without these member of sudo rules.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">not_in_sudorule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16095">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">sudo rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_find</S>
          <Obj N="takes_args" RefId="16096">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16097">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16098">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16099">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacsvc_mod" RefId="16100">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify an HBAC service.</S>
          <Obj N="takes_options" RefId="16101">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16102">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16103">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16105">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16106">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16107">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16108">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16109">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16110">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16111">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16112">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16113">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16114">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16115">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16116">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16117">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16118">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16119">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16121">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16122">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16123">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16124">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16125">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16127">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16128">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16129">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16130">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16131">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16133">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16134">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16135">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16137">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16138">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16139">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16140">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16141">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16143">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacsvc_mod</S>
          <Obj N="takes_args" RefId="16144">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16145">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">service</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">HBAC service</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16146">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16147">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Service name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_add" RefId="16148">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">_x000A_Add new trust to use._x000A__x000A_This command establishes trust relationship to another domain_x000A_which becomes 'trusted'. As result, users of the trusted domain_x000A_may access resources of this domain._x000A__x000A_Only trusts to Active Directory domains are supported right now._x000A__x000A_The command can be safely run multiple times against the same domain,_x000A_this will cause change to trust relationship credentials on both_x000A_sides._x000A__x000A_Note that if the command was previously run with a specific range type,_x000A_or with automatic detection of the range type, and you want to configure a_x000A_different range type, you may need to delete first the ID range using_x000A_ipa idrange-del before retrying the command with the desired range type._x000A_ </S>
          <Obj N="takes_options" RefId="16149">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16150">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16151">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16152">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16154">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16155">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16156">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16158">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Trust type (ad for Active Directory, default)</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">trust_type</S>
                  <S N="cli_metavar">['ad']</S>
                  <S N="default">ad</S>
                  <Obj N="values" RefId="16159">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ad</S>
                    </LST>
                  </Obj>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16160">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16161">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Trust type (ad for Active Directory, default)</S>
                </MS>
              </Obj>
              <Obj RefId="16162">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">admin</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Active Directory domain administrator</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">realm_admin</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16163">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16164">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Active Directory domain administrator</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16165">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">password</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Active Directory domain administrator's password</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">false</B>
                  <B N="query">false</B>
                  <S N="name">realm_passwd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16167">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Active Directory domain administrator's password</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16168">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">server</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain controller for the Active Directory domain (optional)</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">realm_server</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16169">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16170">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain controller for the Active Directory domain (optional)</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16171">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust_secret</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PASSWORD</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Shared secret for the trust</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">false</B>
                  <B N="query">false</B>
                  <S N="name">trust_secret</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16172">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16173">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Shared secret for the trust</S>
                  <S N="type">unicode</S>
                  <S N="class">Password</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16174">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">base_id</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16175">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">First Posix ID of the range reserved for the trusted domain</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">base_id</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">First Posix ID of the range reserved for the trusted domain</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="16176">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16177">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">range_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16178">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size of the ID range reserved for the trusted domain</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">range_size</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Size of the ID range reserved for the trusted domain</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="16179">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16180">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">range_type</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['ipa-ad-trust', 'ipa-ad-trust-posix']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">range_type</S>
                  <S N="doc">Type of trusted domain ID range, one of ipa-ad-trust, ipa-ad-trust-posix</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Range type</S>
                  <Obj N="values" RefId="16182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>ipa-ad-trust</S>
                      <S>ipa-ad-trust-posix</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">false</B>
                  <Obj N="flags" RefId="16183">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16184">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">two_way</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="16185">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Two-way trust</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">bidirectional</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Establish bi-directional trust. By default trust is inbound one-way only.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16186">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16188">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16189">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">external</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="16190">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">External trust</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">external</S>
                  <S N="cli_metavar">BOOL</S>
                  <B N="default">false</B>
                  <S N="doc">Establish external trust to a domain in another forest. The trust is not transitive beyond the domain.</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16191">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16193">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16194">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16195">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16196">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16197">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16198">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16199">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16200">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16201">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16202">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16203">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16205">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16206">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16207">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16208">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16209">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_add</S>
          <Obj N="takes_args" RefId="16210">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16211">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">realm</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="stageuser_show" RefId="16214">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a stage user.</S>
          <Obj N="takes_options" RefId="16215">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16216">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16217">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16218">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16219">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16220">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16221">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16222">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16223">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16224">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16225">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16226">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16227">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16228">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16229">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16230">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16231">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16232">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16233">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16234">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16235">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16236">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16237">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16238">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16239">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16240">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16241">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16242">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">stageuser_show</S>
          <Obj N="takes_args" RefId="16243">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16244">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="16246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="netgroup_remove_member" RefId="16247">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove members from a netgroup.</S>
          <Obj N="takes_options" RefId="16248">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16249">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16250">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16251">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16252">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16253">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16254">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16255">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16256">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16257">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16258">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16259">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16260">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16261">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16262">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16264">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16265">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16266">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16268">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16271">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16272">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16273">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16274">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16276">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16277">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16278">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16280">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16281">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16283">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">netgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">netgroups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">netgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16285">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member netgroup</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">netgroup_remove_member</S>
          <Obj N="takes_args" RefId="16286">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16287">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, and .</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Netgroup name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Netgroup name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16289">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_remove_option" RefId="16290">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove an option from Sudo Rule.</S>
          <Obj N="takes_options" RefId="16291">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16292">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudooption</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Option</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipasudoopt</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16293">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16294">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Option</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16295">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16296">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16297">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16298">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16299">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16300">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16301">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16302">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16303">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16305">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16306">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16307">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16308">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16309">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16310">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16311">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16312">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16313">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16314">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16316">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_remove_option</S>
          <Obj N="takes_args" RefId="16317">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16318">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16319">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16320">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_del" RefId="16321">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove information about the domain associated with the trust.</S>
          <Obj N="takes_options" RefId="16322">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16323">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16324">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16325">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16326">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16327">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16328">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16330">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16331">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_del</S>
          <Obj N="takes_args" RefId="16332">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16333">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16334">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16336">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16337">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16338">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_disable" RefId="16339">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Disable use of IPA resources by the domain of the trust</S>
          <Obj N="takes_options" RefId="16340">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16341">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16343">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16344">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_disable</S>
          <Obj N="takes_args" RefId="16345">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16346">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16347">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16349">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16350">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16351">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trust_resolve" RefId="16352">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Resolve security identifiers of users and groups in trusted domains</S>
          <Obj N="takes_options" RefId="16353">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16354">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sids</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Security Identifiers (SIDs)</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sids</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16355">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Security Identifiers (SIDs)</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16357">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16358">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16359">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16361">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16362">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16363">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16364">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16366">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16367">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16368">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16369">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16372">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trust_resolve</S>
          <Obj N="takes_args" RefId="16373">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="vault_del" RefId="16374">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete a vault.</S>
          <Obj N="takes_options" RefId="16375">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16376">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">continue</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16377">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;continue&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">continue</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Continuous mode: Don't stop on errors.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16378">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16380">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16381">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16382">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">service</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service name of the service vault</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">false</B>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;service&gt;</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16384">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">shared</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16385">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;shared&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">shared</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Shared vault</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16386">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16388">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16389">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">user</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Username of the user vault</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">username</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16390">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16391">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;username&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16392">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16394">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16395">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vault_del</S>
          <Obj N="takes_args" RefId="16396">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16397">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, ., and -</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.-]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Vault name</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Vault name</S>
                  <Obj N="flags" RefId="16399">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnszone_remove_permission" RefId="16400">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove a permission for per-zone access delegation.</S>
          <Obj N="takes_options" RefId="16401">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16402">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16404">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16405">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnszone_remove_permission</S>
          <Obj N="takes_args" RefId="16406">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16407">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16408">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16409">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_mod" RefId="16410">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify DNS forward zone.</S>
          <Obj N="takes_options" RefId="16411">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16412">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">name_from_ip</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">IP network to create reverse zone name from</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">name_from_ip</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16413">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Reverse zone IP network</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16415">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Per-zone forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16416">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16417">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Zone forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16418">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Per-zone conditional forwarding policy. Set to "none" to disable forwarding to global forwarder for this zone. In that case, conditional zone forwarders are disregarded.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="16420">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="16421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16422">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16423">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16424">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16425">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16426">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16428">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16430">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16431">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16433">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16434">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16435">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16438">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16439">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16440">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16441">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16442">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16445">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16446">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16447">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16448">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16451">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16454">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_mod</S>
          <Obj N="takes_args" RefId="16455">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16456">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16457">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="cert_status" RefId="16459">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Check the status of a certificate signing request.</S>
          <Obj N="takes_options" RefId="16460">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16461">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ca</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">true</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Issuing CA</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cacn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="default">ipa</S>
                  <S N="doc">Name of issuing CA</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16462">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16463">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16464">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16465">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16466">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16467">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16468">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16469">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16470">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16471">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16472">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16473">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16475">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16476">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16477">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16478">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16479">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">cert_status</S>
          <Obj N="takes_args" RefId="16480">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16481">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">request_id</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16482">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Request id</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">request_id</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Request id</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="16483">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>no_create</S>
                      <S>no_output</S>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_show" RefId="16484">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show managed suffix.</S>
          <Obj N="takes_options" RefId="16485">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16486">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16487">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16488">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16489">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16490">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16491">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16492">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16493">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16494">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16495">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16496">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16497">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16498">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16499">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16500">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16502">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16503">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16504">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16505">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16506">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_show</S>
          <Obj N="takes_args" RefId="16507">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16508">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16510">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountlocation_add" RefId="16511">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new automount location.</S>
          <Obj N="takes_options" RefId="16512">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16513">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16514">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16516">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16517">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16518">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16519">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16520">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16521">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16522">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16523">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16524">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16525">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16526">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16527">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16528">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16529">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16530">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16531">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16532">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16533">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16534">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16535">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16536">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountlocation_add</S>
          <Obj N="takes_args" RefId="16537">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16538">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">location</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16540">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_enable" RefId="16541">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="16542">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16543">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16544">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_enable</S>
          <Obj N="takes_args" RefId="16547">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16548">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16549">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="trustdomain_find" RefId="16551">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search domains of the trust</S>
          <Obj N="takes_options" RefId="16552">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16553">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">domain</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16554">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16555">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16556">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">flat_name</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain NetBIOS name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipantflatname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16557">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16558">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain NetBIOS name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16559">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sid</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Domain Security Identifier</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">ipanttrusteddomainsid</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16560">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16561">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Domain Security Identifier</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16562">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16563">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16564">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16565">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16566">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16567">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16568">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16569">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16570">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16571">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16572">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16573">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16574">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16575">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16578">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16579">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16580">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16581">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16582">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16583">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16584">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16585">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("domain")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16586">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16587">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16588">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">trustdomain_find</S>
          <Obj N="takes_args" RefId="16589">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16590">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">trust</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Realm name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">trustcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16591">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Realm name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16593">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16594">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="privilege_add_permission" RefId="16596">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add permissions to a privilege.</S>
          <Obj N="takes_options" RefId="16597">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16598">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16599">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16600">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16601">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16602">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16603">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16604">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16605">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16606">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16607">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16608">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16609">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16610">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16612">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16613">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16614">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16615">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16617">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16618">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16619">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16620">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">permissions</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permission</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16621">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">permission</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">privilege_add_permission</S>
          <Obj N="takes_args" RefId="16623">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16624">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Privilege name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16625">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16626">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Privilege name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_remove_host" RefId="16627">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove hosts that can manage this service.</S>
          <Obj N="takes_options" RefId="16628">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16629">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16630">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16631">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16633">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16634">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16635">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16636">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16637">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16639">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16640">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16641">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16642">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16645">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16646">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16648">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16651">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16652">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_remove_host</S>
          <Obj N="takes_args" RefId="16654">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16655">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16656">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16657">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="delegation_find" RefId="16658">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for delegations.</S>
          <Obj N="takes_options" RefId="16659">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16660">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Delegation name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">aciname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16661">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16662">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Delegation name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16663">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16665">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16666">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the delegation applies</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16669">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">membergroup</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group to apply delegation to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">memberof</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16671">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Member user group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16672">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">group</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">User group ACI grants access to</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16674">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">User group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16675">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16676">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16677">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16678">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16680">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16681">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16682">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16683">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16684">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16685">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16686">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16687">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16688">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16689">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16690">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16691">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16692">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16693">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16694">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">delegation_find</S>
          <Obj N="takes_args" RefId="16696">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16697">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16698">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16699">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="idview_find" RefId="16700">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for an ID View.</S>
          <Obj N="takes_options" RefId="16701">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16702">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ID View Name</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16703">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16704">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ID View Name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16705">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16707">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16708">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">timelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16709">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">timelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time limit of search in seconds (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16710">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16711">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sizelimit</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16712">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Size Limit</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sizelimit</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Maximum number of entries returned (0 is unlimited)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16713">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_display</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16714">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16715">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16716">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16717">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16718">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16720">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16721">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16723">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16724">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16726">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16727">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16728">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16729">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16730">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16731">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16733">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16734">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">idview_find</S>
          <Obj N="takes_args" RefId="16735">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16736">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16737">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysuffix_mod" RefId="16739">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Modify a topology suffix.</S>
          <Obj N="takes_options" RefId="16740">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16741">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="16742">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">suffix_dn</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">DNPARAM</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Managed LDAP suffix DN</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">iparepltopoconfroot</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16743">
                    <TNRef RefId="1" />
                    <LST>
                      <S>nonempty</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Managed LDAP suffix DN</S>
                  <S N="type">DN</S>
                  <S N="class">DNParam</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16744">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16745">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16746">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16748">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16749">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16750">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16752">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16753">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16754">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16755">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16756">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16757">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16759">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16760">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16761">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16762">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16763">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16765">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16767">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16768">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16769">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16770">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16772">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16773">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16774">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16776">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysuffix_mod</S>
          <Obj N="takes_args" RefId="16777">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16778">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16779">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16780">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="certmaprule_mod" RefId="16781">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify a Certificate Identity Mapping Rule.</S>
          <Obj N="takes_options" RefId="16782">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16783">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16784">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16785">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16786">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">maprule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to map the certificate with a user entry</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapmaprule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16787">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16788">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Mapping rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16789">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">matchrule</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule used to check if a certificate can be used for authentication</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ipacertmapmatchrule</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16790">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16791">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Matching rule</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16792">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">domain</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Domain name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">true</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">associateddomain</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Domain where the user entry will be searched</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16794">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16795">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16796">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Priority</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipacertmappriority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Priority of the rule (higher number means lower priority</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="16797">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16798">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipaenabledflag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16799">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Enabled</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipaenabledflag</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">true</B>
                  <S N="doc">Enabled</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="16800">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16801">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16802">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16803">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16804">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16805">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16807">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16808">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16809">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16810">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16811">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16812">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16813">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16814">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16815">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16816">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16818">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16819">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16820">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16821">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16822">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16824">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16825">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16826">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16827">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16828">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16829">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16830">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16831">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16832">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16833">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16834">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16835">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">certmaprule_mod</S>
          <Obj N="takes_args" RefId="16836">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16837">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">rulename</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Certificate Identity Mapping Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16838">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selinuxusermap_add_user" RefId="16840">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add users and groups to an SELinux User Map rule.</S>
          <Obj N="takes_options" RefId="16841">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16842">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16843">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16845">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16846">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16847">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16848">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16849">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16851">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16852">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16853">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16854">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16855">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16856">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16857">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16858">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16859">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16860">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16861">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16862">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16863">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16864">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16865">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16866">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16867">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16868">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16869">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selinuxusermap_add_user</S>
          <Obj N="takes_args" RefId="16870">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16871">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16872">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16873">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudorule_add_allow_command" RefId="16874">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add commands and sudo command groups affected by Sudo Rule.</S>
          <Obj N="takes_options" RefId="16875">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16876">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16877">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16879">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16880">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16881">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16882">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16883">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16885">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16886">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16887">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16888">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16889">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16891">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16892">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16893">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16894">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16897">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16898">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmds</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo commands to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16899">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16900">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16901">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">sudocmdgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">sudo command groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">sudocmdgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16902">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16903">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member sudo command group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudorule_add_allow_command</S>
          <Obj N="takes_args" RefId="16904">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16905">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">sudorule_name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16907">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="adtrust_is_enabled" RefId="16908">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">true</B>
          <S N="doc">Determine whether ipa-adtrust-install has been run on this system</S>
          <Obj N="takes_options" RefId="16909">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16910">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16911">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16912">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">adtrust_is_enabled</S>
          <Obj N="takes_args" RefId="16914">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_show" RefId="16915">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a host.</S>
          <Obj N="takes_options" RefId="16916">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16917">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="16918">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16919">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16921">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16922">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">out</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">file to store certificate in</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">out</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16923">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16924">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;out&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16925">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16926">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16927">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16929">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16930">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16931">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16932">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16933">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16934">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16935">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16936">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16937">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16938">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16940">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16941">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16942">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16944">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16945">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16946">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_show</S>
          <Obj N="takes_args" RefId="16947">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16948">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16949">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_enable" RefId="16951">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Enable a user account.</S>
          <Obj N="takes_options" RefId="16952">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16953">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16954">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16955">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16956">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_enable</S>
          <Obj N="takes_args" RefId="16957">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16958">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="16959">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="16960">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="role_add_member" RefId="16961">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add members to a role.</S>
          <Obj N="takes_options" RefId="16962">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="16963">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16964">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16965">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16966">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16967">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16968">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16969">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16970">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16971">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16972">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16973">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16974">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16975">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="16976">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="16977">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16978">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16979">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="16980">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="16981">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="16982">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="16983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="16984">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="16985">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16986">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16988">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16989">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16991">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16992">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16993">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16994">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16996">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="16997">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">services</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">services to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">service</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="16998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="16999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">role_add_member</S>
          <Obj N="takes_args" RefId="17000">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17001">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Role name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17002">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Role name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="config_show" RefId="17004">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show the current configuration.</S>
          <Obj N="takes_options" RefId="17005">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17006">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17007">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17008">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17009">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17010">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17011">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17012">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17014">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17015">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17016">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17017">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17018">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17019">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17020">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17021">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17022">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17023">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17024">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17025">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17026">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">config_show</S>
          <Obj N="takes_args" RefId="17027">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="host_allow_create_keytab" RefId="17028">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Allow users, groups, hosts or host groups to create a keytab of this host.</S>
          <Obj N="takes_options" RefId="17029">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17030">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17031">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17032">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17033">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17035">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17036">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17037">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17038">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17039">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17040">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17041">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17042">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17043">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17044">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17045">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17046">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17047">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17048">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17049">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17050">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17051">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17052">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17053">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17054">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17055">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17056">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17057">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17058">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17059">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17060">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17061">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17062">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17063">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">host_allow_create_keytab</S>
          <Obj N="takes_args" RefId="17064">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17065">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">hostname</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Host name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">fqdn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17066">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17067">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Host name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="topologysegment_show" RefId="17068">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display a segment.</S>
          <Obj N="takes_options" RefId="17069">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17070">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17071">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17072">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17073">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17074">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17075">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17076">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17077">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17078">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17079">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17080">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17081">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17082">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17083">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17084">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17085">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17086">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17087">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17088">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17089">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17090">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">topologysegment_show</S>
          <Obj N="takes_args" RefId="17091">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17092">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">topologysuffix</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Suffix name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">topologysuffixcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17093">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17094">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Suffix name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17095">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">Segment name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Arbitrary string identifying the segment</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17096">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17097">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="service_allow_create_keytab" RefId="17098">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Allow users, groups, hosts or host groups to create a keytab of this service.</S>
          <Obj N="takes_options" RefId="17099">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17100">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17101">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17102">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17103">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17104">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17105">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17106">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17107">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17108">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17109">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17110">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17111">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17112">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17113">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17114">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17115">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17116">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17117">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17118">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17119">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17120">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17121">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17122">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">users</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">users to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">user</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17123">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17124">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member user</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17125">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">groups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">group</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17126">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17127">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17128">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hosts</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">hosts to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">host</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17129">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17130">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17131">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hostgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">host groups to add</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hostgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17132">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17133">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member host group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">service_allow_create_keytab</S>
          <Obj N="takes_args" RefId="17134">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17135">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="17136">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">canonical_principal</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Service principal</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">krbcanonicalname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17137">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">true</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">false</B>
                  <S N="label">Principal name</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="vaultconfig_show" RefId="17138">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show vault configuration.</S>
          <Obj N="takes_options" RefId="17139">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17140">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">transport_out</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Output file to store the transport certificate</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">transport_out</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17141">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17142">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;transport_out&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17143">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17144">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17145">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17146">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17147">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17148">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17149">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17150">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17151">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17152">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17153">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17154">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17155">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17156">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17157">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17158">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">vaultconfig_show</S>
          <Obj N="takes_args" RefId="17159">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="sudocmd_show" RefId="17160">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display Sudo Command.</S>
          <Obj N="takes_options" RefId="17161">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17162">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17163">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17164">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17165">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17166">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17167">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17168">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17169">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17170">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17171">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17172">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17173">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17174">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17175">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17176">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17177">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17178">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17179">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17180">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17181">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17182">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17183">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17184">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17185">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17186">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17187">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17188">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">sudocmd_show</S>
          <Obj N="takes_args" RefId="17189">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17190">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Sudo Command</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">sudocmd</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17191">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17192">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Sudo Command</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_del" RefId="17193">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Delete DNS resource record.</S>
          <Obj N="takes_options" RefId="17194">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17195">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17196">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="17197">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17198">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="17199">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="17200">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="17201">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17202">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">a_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">ARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">arecord</S>
                  <S N="cli_metavar">ARECORD</S>
                  <S N="doc">Raw A records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17203">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17204">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17205">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">aaaa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AAAARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaarecord</S>
                  <S N="cli_metavar">AAAARECORD</S>
                  <S N="doc">Raw AAAA records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17206">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17207">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17208">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">a6_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">A6Record</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6record</S>
                  <S N="cli_metavar">A6RECORD</S>
                  <S N="doc">Raw A6 records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17209">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17210">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17211">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">afsdb_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AFSDB record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AFSDBRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdbrecord</S>
                  <S N="cli_metavar">AFSDBRECORD</S>
                  <S N="doc">Raw AFSDB records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17212">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17213">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17214">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">apl_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">APL record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">APLRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aplrecord</S>
                  <S N="cli_metavar">APLRECORD</S>
                  <S N="doc">Raw APL records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17215">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17216">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17217">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cert_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CERTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">certrecord</S>
                  <S N="cli_metavar">CERTRECORD</S>
                  <S N="doc">Raw CERT records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17218">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17219">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17220">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">cname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">cnamerecord</S>
                  <S N="cli_metavar">CNAMERECORD</S>
                  <S N="doc">Raw CNAME records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17221">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17222">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17223">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dhcid_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DHCID record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DHCIDRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dhcidrecord</S>
                  <S N="cli_metavar">DHCIDRECORD</S>
                  <S N="doc">Raw DHCID records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17224">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17225">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17226">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dlv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DLVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlvrecord</S>
                  <S N="cli_metavar">DLVRECORD</S>
                  <S N="doc">Raw DLV records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17227">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17228">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17229">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnamerecord</S>
                  <S N="cli_metavar">DNAMERECORD</S>
                  <S N="doc">Raw DNAME records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17230">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17231">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17232">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ds_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dsrecord</S>
                  <S N="cli_metavar">DSRECORD</S>
                  <S N="doc">Raw DS records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17233">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17234">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17235">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">hip_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">HIP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">HIPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">hiprecord</S>
                  <S N="cli_metavar">HIPRECORD</S>
                  <S N="doc">Raw HIP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17236">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17237">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17238">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipseckey_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">IPSECKEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IPSECKEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipseckeyrecord</S>
                  <S N="cli_metavar">IPSECKEYRECORD</S>
                  <S N="doc">Raw IPSECKEY records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17239">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17240">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17241">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">key_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">keyrecord</S>
                  <S N="cli_metavar">KEYRECORD</S>
                  <S N="doc">Raw KEY records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17242">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17243">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17244">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">kx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">kxrecord</S>
                  <S N="cli_metavar">KXRECORD</S>
                  <S N="doc">Raw KX records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17245">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17246">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17247">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">loc_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">LOC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">LOCRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">locrecord</S>
                  <S N="cli_metavar">LOCRECORD</S>
                  <S N="doc">Raw LOC records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17248">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17249">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17250">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">mx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">MXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">mxrecord</S>
                  <S N="cli_metavar">MXRECORD</S>
                  <S N="doc">Raw MX records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17251">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17252">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17253">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">naptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NAPTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptrrecord</S>
                  <S N="cli_metavar">NAPTRRECORD</S>
                  <S N="doc">Raw NAPTR records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17254">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17255">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17256">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ns_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsrecord</S>
                  <S N="cli_metavar">NSRECORD</S>
                  <S N="doc">Raw NS records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17257">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17258">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17259">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">nsec_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSECRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsecrecord</S>
                  <S N="cli_metavar">NSECRECORD</S>
                  <S N="doc">Raw NSEC records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17260">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17261">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17262">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">PTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">PTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptrrecord</S>
                  <S N="cli_metavar">PTRRECORD</S>
                  <S N="doc">Raw PTR records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17263">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17264">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17265">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rrsig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RRSIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RRSIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rrsigrecord</S>
                  <S N="cli_metavar">RRSIGRECORD</S>
                  <S N="doc">Raw RRSIG records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17266">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17267">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17268">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rprecord</S>
                  <S N="cli_metavar">RPRECORD</S>
                  <S N="doc">Raw RP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17269">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17270">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17271">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sigrecord</S>
                  <S N="cli_metavar">SIGRECORD</S>
                  <S N="doc">Raw SIG records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17272">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17273">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17274">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">spf_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SPF record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SPFRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">spfrecord</S>
                  <S N="cli_metavar">SPFRECORD</S>
                  <S N="doc">Raw SPF records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17275">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17276">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17277">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">srv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SRV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SRVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">srvrecord</S>
                  <S N="cli_metavar">SRVRECORD</S>
                  <S N="doc">Raw SRV records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17278">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17279">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17280">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">sshfp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SSHFPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfprecord</S>
                  <S N="cli_metavar">SSHFPRECORD</S>
                  <S N="doc">Raw SSHFP records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17281">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17282">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17283">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">tlsa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TLSARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsarecord</S>
                  <S N="cli_metavar">TLSARECORD</S>
                  <S N="doc">Raw TLSA records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17284">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17285">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17286">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">txt_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TXTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">txtrecord</S>
                  <S N="cli_metavar">TXTRECORD</S>
                  <S N="doc">Raw TXT records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17287">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17288">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17289">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">uri_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">URIRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">urirecord</S>
                  <S N="cli_metavar">URIRECORD</S>
                  <S N="doc">Raw URI records</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17290">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17291">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17292">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">del_all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17293">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Delete all associated records</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">del_all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Delete all associated records</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17294">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17295">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17296">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17297">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">structured</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17298">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Structured</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">structured</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Parse all raw DNS records and return them in a structured way</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17299">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17300">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17301">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17302">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17303">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17304">
                    <TNRef RefId="1" />
                    <LST>
                      <S>cli</S>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">&lt;raw&gt;</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17305">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17306">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17307">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17308">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17309">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17310">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17311">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_del</S>
          <Obj N="takes_args" RefId="17312">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17313">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17314">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17315">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17316">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17317">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17318">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="caacl_remove_ca" RefId="17319">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove CAs from a CA ACL.</S>
          <Obj N="takes_options" RefId="17320">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17321">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17322">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17323">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17324">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17325">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17326">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17327">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17328">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17329">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17330">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17331">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17332">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17333">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17334">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17335">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17336">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17337">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17338">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17339">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17340">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17341">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17342">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17343">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">cas</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Certificate Authorities to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">ca</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17344">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17345">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member Certificate Authority</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">caacl_remove_ca</S>
          <Obj N="takes_args" RefId="17346">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17347">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">ACL name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17348">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17349">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">ACL name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="output_find" RefId="17350">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Search for command outputs.</S>
          <Obj N="takes_options" RefId="17351">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17352">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17353">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17354">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17355">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17356">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17357">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17358">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17359">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17360">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17361">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17362">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17363">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17364">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17365">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17366">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17367">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17368">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">pkey_only</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17369">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Primary key only</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">pkey_only</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Results should contain primary key attribute only ("name")</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="17370">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17371">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17372">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">output_find</S>
          <Obj N="takes_args" RefId="17373">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17374">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">command</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Full name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">commandfull_name</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17375">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_search</S>
                    </LST>
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17376">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Full name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17377">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">criteria</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">A string searched in all relevant object attributes</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">false</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">criteria</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17378">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17379">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">&lt;criteria&gt;</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="selfservice_add" RefId="17380">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add a new self-service permission.</S>
          <Obj N="takes_options" RefId="17381">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17382">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">permissions</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Permissions to grant (read, write). Default is write.</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">permissions</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17383">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17384">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Permissions</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17385">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">attrs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Attributes to which the permission applies.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">attrs</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17386">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17387">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Attributes</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17388">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17389">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17390">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17391">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17392">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17393">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17394">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17395">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17396">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17397">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17398">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17399">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17400">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17401">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17402">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17403">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">selfservice_add</S>
          <Obj N="takes_args" RefId="17404">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17405">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">May only contain letters, numbers, -, _, and space</S>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[-_ a-zA-Z0-9]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Self-service name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aciname</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Self-service name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17406">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17407">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsrecord_add" RefId="17408">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Add new DNS resource record.</S>
          <Obj N="takes_options" RefId="17409">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17410">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ttl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17411">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Time to live</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnsttl</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Time to live</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="17412">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17413">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="17414">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">class</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['IN', 'CS', 'CH', 'HS']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">dnsclass</S>
                  <S N="doc">&lt;dnsclass&gt;</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;dnsclass&gt;</S>
                  <Obj N="values" RefId="17415">
                    <TNRef RefId="1" />
                    <LST>
                      <S>IN</S>
                      <S>CS</S>
                      <S>CH</S>
                      <S>HS</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="17416">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17417">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">ARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">arecord</S>
                  <S N="cli_metavar">ARECORD</S>
                  <S N="doc">Raw A records</S>
                  <S N="option_group">A Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17418">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17419">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17420">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a_ip_address</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A IP Address</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">a_part_ip_address</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">A IP Address</S>
                  <S N="option_group">A Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17421">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17422">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17423">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a_create_reverse</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17424">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">A Create reverse</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">a_extra_create_reverse</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Create reverse record for this IP Address</S>
                  <S N="option_group">A Record</S>
                  <Obj N="truths" RefId="17425">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17426">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17427">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17428">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">aaaa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AAAARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaarecord</S>
                  <S N="cli_metavar">AAAARECORD</S>
                  <S N="doc">Raw AAAA records</S>
                  <S N="option_group">AAAA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17429">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17430">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17431">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">aaaa_ip_address</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AAAA IP Address</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaa_part_ip_address</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">AAAA IP Address</S>
                  <S N="option_group">AAAA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17432">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17433">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17434">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">aaaa_create_reverse</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17435">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">AAAA Create reverse</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">aaaa_extra_create_reverse</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Create reverse record for this IP Address</S>
                  <S N="option_group">AAAA Record</S>
                  <Obj N="truths" RefId="17436">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17437">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17438">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_update</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17439">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a6_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">A6Record</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6record</S>
                  <S N="cli_metavar">A6RECORD</S>
                  <S N="doc">Raw A6 records</S>
                  <S N="option_group">A6 Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17440">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17441">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17442">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">a6_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">A6 Record data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">a6_part_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">A6 Record data</S>
                  <S N="option_group">A6 Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17443">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17444">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17445">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">AFSDB record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">AFSDBRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdbrecord</S>
                  <S N="cli_metavar">AFSDBRECORD</S>
                  <S N="doc">Raw AFSDB records</S>
                  <S N="option_group">AFSDB Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17446">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17447">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17448">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_subtype</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17449">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">AFSDB Subtype</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdb_part_subtype</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">AFSDB Subtype</S>
                  <S N="option_group">AFSDB Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17450">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17451">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">afsdb_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">AFSDB Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17452">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">afsdb_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">AFSDB Hostname</S>
                  <S N="option_group">AFSDB Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17453">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17454">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">apl_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">APL record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">APLRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">aplrecord</S>
                  <S N="cli_metavar">APLRECORD</S>
                  <S N="doc">Raw APL records</S>
                  <S N="option_group">APL Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17455">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17456">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17457">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CERTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">certrecord</S>
                  <S N="cli_metavar">CERTRECORD</S>
                  <S N="doc">Raw CERT records</S>
                  <S N="option_group">CERT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17458">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17459">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17460">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17461">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Certificate Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Certificate Type</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17462">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17463">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17464">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Key Tag</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17465">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17466">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17467">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CERT Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">CERT Algorithm</S>
                  <S N="option_group">CERT Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17468">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17469">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cert_certificate_or_crl</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CERT Certificate/CRL</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cert_part_certificate_or_crl</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">CERT Certificate/CRL</S>
                  <S N="option_group">CERT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17470">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17471">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17472">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">CNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">CNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">cnamerecord</S>
                  <S N="cli_metavar">CNAMERECORD</S>
                  <S N="doc">Raw CNAME records</S>
                  <S N="option_group">CNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17473">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17474">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17475">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">cname_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">CNAME Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17476">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">cname_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A hostname which this alias hostname points to</S>
                  <S N="option_group">CNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17477">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17478">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dhcid_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DHCID record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DHCIDRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dhcidrecord</S>
                  <S N="cli_metavar">DHCIDRECORD</S>
                  <S N="doc">Raw DHCID records</S>
                  <S N="option_group">DHCID Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17479">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17480">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17481">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DLVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlvrecord</S>
                  <S N="cli_metavar">DLVRECORD</S>
                  <S N="doc">Raw DLV records</S>
                  <S N="option_group">DLV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17482">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17483">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17484">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17485">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Key Tag</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17486">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17487">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17488">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Algorithm</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17489">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17490">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dlv_digest_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17491">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DLV Digest Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_digest_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DLV Digest Type</S>
                  <S N="option_group">DLV Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17492">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17493">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">only hexadecimal digits are allowed</S>
                  <S N="cli_name">dlv_digest</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[0-9a-fA-F]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DLV Digest</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">dlv_part_digest</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">DLV Digest</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17494">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="option_group">DLV Record</S>
                  <Obj N="flags" RefId="17495">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17496">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dname_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DNAME record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNAMERecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnamerecord</S>
                  <S N="cli_metavar">DNAMERECORD</S>
                  <S N="doc">Raw DNAME records</S>
                  <S N="option_group">DNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17497">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17498">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17499">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">dname_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DNAME Target</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17500">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dname_part_target</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">DNAME Target</S>
                  <S N="option_group">DNAME Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17501">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17502">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">dsrecord</S>
                  <S N="cli_metavar">DSRECORD</S>
                  <S N="doc">Raw DS records</S>
                  <S N="option_group">DS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17503">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17504">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17505">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_key_tag</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17506">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Key Tag</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_key_tag</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Key Tag</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17507">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17508">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17509">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Algorithm</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17510">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17511">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ds_digest_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17512">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">DS Digest Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_digest_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">DS Digest Type</S>
                  <S N="option_group">DS Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17513">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17514">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">only hexadecimal digits are allowed</S>
                  <S N="cli_name">ds_digest</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[0-9a-fA-F]+$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">DS Digest</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">ds_part_digest</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">DS Digest</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17515">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="option_group">DS Record</S>
                  <Obj N="flags" RefId="17516">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17517">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">hip_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">HIP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">HIPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">hiprecord</S>
                  <S N="cli_metavar">HIPRECORD</S>
                  <S N="doc">Raw HIP records</S>
                  <S N="option_group">HIP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17518">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17519">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17520">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ipseckey_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">IPSECKEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">IPSECKEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipseckeyrecord</S>
                  <S N="cli_metavar">IPSECKEYRECORD</S>
                  <S N="doc">Raw IPSECKEY records</S>
                  <S N="option_group">IPSECKEY Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17521">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17522">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17523">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">key_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KEY record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KEYRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">keyrecord</S>
                  <S N="cli_metavar">KEYRECORD</S>
                  <S N="doc">Raw KEY records</S>
                  <S N="option_group">KEY Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17524">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17525">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17526">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">KX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">KXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">kxrecord</S>
                  <S N="cli_metavar">KXRECORD</S>
                  <S N="doc">Raw KX records</S>
                  <S N="option_group">KX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17527">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17528">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17529">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17530">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">KX Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">kx_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Preference given to this exchanger. Lower values are more preferred</S>
                  <S N="option_group">KX Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17531">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17532">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">kx_exchanger</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">KX Exchanger</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17533">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">kx_part_exchanger</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A host willing to act as a key exchanger</S>
                  <S N="option_group">KX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17534">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17535">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">LOC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">LOCRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">locrecord</S>
                  <S N="cli_metavar">LOCRECORD</S>
                  <S N="doc">Raw LOC records</S>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17536">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17537">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17538">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_deg</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17539">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Degrees Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_deg</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Degrees Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">90</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17540">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17541">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_min</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17542">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Minutes Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_min</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Minutes Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">59</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17543">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17544">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_sec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17545">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Seconds Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_lat_sec</S>
                  <I32 N="precision">3</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Seconds Latitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">59.999</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="17546">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17547">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17548">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lat_dir</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">LOC Direction Latitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lat_dir</S>
                  <S N="cli_metavar">['N', 'S']</S>
                  <Obj N="values" RefId="17549">
                    <TNRef RefId="1" />
                    <LST>
                      <S>N</S>
                      <S>S</S>
                    </LST>
                  </Obj>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17550">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17551">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">LOC Direction Latitude</S>
                </MS>
              </Obj>
              <Obj RefId="17552">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_deg</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17553">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Degrees Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_deg</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Degrees Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">180</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17554">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17555">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_min</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17556">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Minutes Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_min</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">LOC Minutes Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <I32 N="maxvalue">59</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17557">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17558">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_sec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17559">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Seconds Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_lon_sec</S>
                  <I32 N="precision">3</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Seconds Longitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">59.999</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="17560">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17561">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17562">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_lon_dir</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="deprecated">false</B>
                  <S N="label">LOC Direction Longitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">StrEnum</S>
                  <B N="no_convert">false</B>
                  <S N="name">loc_part_lon_dir</S>
                  <S N="cli_metavar">['E', 'W']</S>
                  <Obj N="values" RefId="17563">
                    <TNRef RefId="1" />
                    <LST>
                      <S>E</S>
                      <S>W</S>
                    </LST>
                  </Obj>
                  <S N="option_group">LOC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17564">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17565">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="doc">LOC Direction Longitude</S>
                </MS>
              </Obj>
              <Obj RefId="17566">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_altitude</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17567">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Altitude</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_altitude</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Altitude</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">42849672.95</S>
                  <S N="minvalue">-100000.00</S>
                  <Obj N="numberclass" RefId="17568">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17569">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17570">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_size</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17571">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Size</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_size</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Size</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="17572">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17573">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17574">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_h_precision</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17575">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Horizontal Precision</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_h_precision</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Horizontal Precision</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="17576">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17577">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17578">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">loc_v_precision</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17579">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">LOC Vertical Precision</S>
                  <B N="multivalue">false</B>
                  <S N="type">Decimal</S>
                  <S N="name">loc_part_v_precision</S>
                  <I32 N="precision">2</I32>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Decimal</S>
                  <B N="no_convert">false</B>
                  <B N="exponential">false</B>
                  <S N="cli_metavar">DECIMAL</S>
                  <S N="doc">LOC Vertical Precision</S>
                  <S N="option_group">LOC Record</S>
                  <S N="maxvalue">90000000.00</S>
                  <S N="minvalue">0.0</S>
                  <Obj N="numberclass" RefId="17580">
                    <TNRef RefId="1" />
                    <LST>
                      <S>-Normal</S>
                      <S>+Zero</S>
                      <S>+Normal</S>
                    </LST>
                  </Obj>
                  <Obj N="flags" RefId="17581">
                    <TNRef RefId="1" />
                    <LST>
                      <S>dnsrecord_optional</S>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17582">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">MX record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">MXRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">mxrecord</S>
                  <S N="cli_metavar">MXRECORD</S>
                  <S N="doc">Raw MX records</S>
                  <S N="option_group">MX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17583">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17584">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17585">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17586">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">MX Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">mx_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Preference given to this exchanger. Lower values are more preferred</S>
                  <S N="option_group">MX Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17587">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17588">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">mx_exchanger</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">MX Exchanger</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17589">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">mx_part_exchanger</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">A host willing to act as a mail exchanger</S>
                  <S N="option_group">MX Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17590">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17591">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NAPTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptrrecord</S>
                  <S N="cli_metavar">NAPTRRECORD</S>
                  <S N="doc">Raw NAPTR records</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17592">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17593">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17594">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_order</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17595">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NAPTR Order</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_order</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">NAPTR Order</S>
                  <S N="option_group">NAPTR Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17596">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17597">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_preference</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17598">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NAPTR Preference</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_preference</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">NAPTR Preference</S>
                  <S N="option_group">NAPTR Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17599">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17600">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_flags</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Flags</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_flags</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Flags</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17601">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17602">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17603">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_service</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Service</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_service</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Service</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17604">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17605">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17606">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_regexp</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Regular Expression</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_regexp</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Regular Expression</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17607">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17608">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17609">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">naptr_replacement</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NAPTR Replacement</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">naptr_part_replacement</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">NAPTR Replacement</S>
                  <S N="option_group">NAPTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17610">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17611">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17612">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ns_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NS record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsrecord</S>
                  <S N="cli_metavar">NSRECORD</S>
                  <S N="doc">Raw NS records</S>
                  <S N="option_group">NS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17613">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17614">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17615">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ns_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">NS Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17616">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">ns_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">NS Hostname</S>
                  <S N="option_group">NS Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17617">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17618">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">nsec_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">NSEC record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">NSECRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">nsecrecord</S>
                  <S N="cli_metavar">NSECRECORD</S>
                  <S N="doc">Raw NSEC records</S>
                  <S N="option_group">NSEC Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17619">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17620">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17621">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ptr_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">PTR record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">PTRRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptrrecord</S>
                  <S N="cli_metavar">PTRRECORD</S>
                  <S N="doc">Raw PTR records</S>
                  <S N="option_group">PTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17622">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17623">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17624">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">ptr_hostname</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">PTR Hostname</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17625">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">ptr_part_hostname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">The hostname this reverse record points to</S>
                  <S N="option_group">PTR Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17626">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17627">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">rrsig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RRSIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RRSIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rrsigrecord</S>
                  <S N="cli_metavar">RRSIGRECORD</S>
                  <S N="doc">Raw RRSIG records</S>
                  <S N="option_group">RRSIG Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17628">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17629">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17630">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">rp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">RP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">RPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">rprecord</S>
                  <S N="cli_metavar">RPRECORD</S>
                  <S N="doc">Raw RP records</S>
                  <S N="option_group">RP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17631">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17632">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17633">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sig_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SIG record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SIGRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sigrecord</S>
                  <S N="cli_metavar">SIGRECORD</S>
                  <S N="doc">Raw SIG records</S>
                  <S N="option_group">SIG Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17634">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17635">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17636">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">spf_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SPF record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SPFRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">spfrecord</S>
                  <S N="cli_metavar">SPFRECORD</S>
                  <S N="doc">Raw SPF records</S>
                  <S N="option_group">SPF Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17637">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17638">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17639">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SRV record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SRVRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">srvrecord</S>
                  <S N="cli_metavar">SRVRECORD</S>
                  <S N="doc">Raw SRV records</S>
                  <S N="option_group">SRV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17640">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17641">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17642">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17643">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Priority (order)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_priority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Lower number means higher priority. Clients will attempt to contact the server with the lowest-numbered priority they can reach.</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17644">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17645">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_weight</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17646">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Weight</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_weight</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Relative weight for entries with the same priority.</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17647">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17648">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_port</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17649">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Port</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_port</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SRV Port</S>
                  <S N="option_group">SRV Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17650">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17651">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">srv_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SRV Target</S>
                  <B N="only_absolute">false</B>
                  <Obj N="flags" RefId="17652">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">srv_part_target</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">The domain name of the target host or '.' if the service is decidedly not available at this domain</S>
                  <S N="option_group">SRV Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17653">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17654">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">SSHFPRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfprecord</S>
                  <S N="cli_metavar">SSHFPRECORD</S>
                  <S N="doc">Raw SSHFP records</S>
                  <S N="option_group">SSHFP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17655">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17656">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17657">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_algorithm</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17658">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SSHFP Algorithm</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_algorithm</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SSHFP Algorithm</S>
                  <S N="option_group">SSHFP Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17659">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17660">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_fp_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17661">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">SSHFP Fingerprint Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_fp_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">SSHFP Fingerprint Type</S>
                  <S N="option_group">SSHFP Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17662">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17663">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">sshfp_fingerprint</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">SSHFP Fingerprint</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">sshfp_part_fingerprint</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">SSHFP Fingerprint</S>
                  <S N="option_group">SSHFP Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17664">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17665">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17666">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TLSARecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsarecord</S>
                  <S N="cli_metavar">TLSARECORD</S>
                  <S N="doc">Raw TLSA records</S>
                  <S N="option_group">TLSA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17667">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17668">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17669">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_cert_usage</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17670">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Certificate Usage</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_cert_usage</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Certificate Usage</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17671">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17672">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_selector</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17673">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Selector</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_selector</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Selector</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17674">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17675">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_matching_type</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17676">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">TLSA Matching Type</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_matching_type</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">TLSA Matching Type</S>
                  <S N="option_group">TLSA Record</S>
                  <I32 N="maxvalue">255</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17677">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17678">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">tlsa_cert_association_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TLSA Certificate Association Data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">tlsa_part_cert_association_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">TLSA Certificate Association Data</S>
                  <S N="option_group">TLSA Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17679">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17680">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17681">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">txt_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">TXTRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">txtrecord</S>
                  <S N="cli_metavar">TXTRECORD</S>
                  <S N="doc">Raw TXT records</S>
                  <S N="option_group">TXT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17682">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17683">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17684">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">txt_data</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">TXT Text Data</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">txt_part_data</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">TXT Text Data</S>
                  <S N="option_group">TXT Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17685">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17686">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17687">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_rec</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="normalizedns">true</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI record</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">URIRecord</S>
                  <B N="no_convert">false</B>
                  <S N="name">urirecord</S>
                  <S N="cli_metavar">URIRECORD</S>
                  <S N="doc">Raw URI records</S>
                  <S N="option_group">URI Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17688">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="validatedns">true</B>
                  <Obj N="flags" RefId="17689">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17690">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_priority</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17691">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">URI Priority (order)</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_priority</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Lower number means higher priority. Clients will attempt to contact the URI with the lowest-numbered priority they can reach.</S>
                  <S N="option_group">URI Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17692">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17693">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_weight</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17694">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">URI Weight</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_weight</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Relative weight for entries with the same priority.</S>
                  <S N="option_group">URI Record</S>
                  <I32 N="maxvalue">65535</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17695">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17696">
                <TNRef RefId="0" />
                <MS>
                  <B N="required">false</B>
                  <S N="cli_name">uri_target</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <I32 N="minlength">1</I32>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">URI Target Uniform Resource Identifier</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uri_part_target</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Target Uniform Resource Identifier according to RFC 3986</S>
                  <S N="option_group">URI Record</S>
                  <Obj N="deprecated_cli_aliases" RefId="17697">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17698">
                    <TNRef RefId="1" />
                    <LST>
                      <S>virtual_attribute</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17699">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17700">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17701">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17702">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17703">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17704">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17705">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17706">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17707">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">force</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17708">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Force</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">force</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">force NS record creation even if its hostname is not in DNS</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17709">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17710">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17711">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17712">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">structured</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17713">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Structured</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">structured</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Parse all raw DNS records and return them in a structured way</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17714">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17715">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17716">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17717">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17718">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17719">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17720">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17721">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17722">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17723">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17724">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17725">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17726">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17727">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17728">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17729">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17730">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17731">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17732">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsrecord_add</S>
          <Obj N="takes_args" RefId="17733">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17734">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">dnszone</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">dnszoneidnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17735">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17736">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17737">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Record name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Record name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17738">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17739">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="automountmap_add" RefId="17740">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new automount map.</S>
          <Obj N="takes_options" RefId="17741">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17742">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17743">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17744">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17745">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17746">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17747">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17748">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17749">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17750">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17751">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17752">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17753">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17754">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17755">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17756">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17757">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17758">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17759">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17760">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17761">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17762">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17763">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17764">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17765">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17766">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17767">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17768">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">automountmap_add</S>
          <Obj N="takes_args" RefId="17769">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17770">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">automountlocation</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount location name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">automountlocationcn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17771">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17772">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Location</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17773">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">map</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">IA5STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Automount map name.</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">automountmapname</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17774">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17775">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Map</S>
                  <S N="type">unicode</S>
                  <S N="class">IA5Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="otpconfig_show" RefId="17776">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Show the current OTP configuration.</S>
          <Obj N="takes_options" RefId="17777">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17778">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17779">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17780">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17781">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17782">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17783">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17784">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17785">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17786">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17787">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17788">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17789">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17790">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17791">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17792">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17793">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17794">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17795">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17796">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17797">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17798">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">otpconfig_show</S>
          <Obj N="takes_args" RefId="17799">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="hbacrule_remove_service" RefId="17800">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove service and service groups from an HBAC rule.</S>
          <Obj N="takes_options" RefId="17801">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17802">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17803">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17804">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17805">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17806">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17807">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17808">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17809">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17810">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17811">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17812">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17813">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17814">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17815">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17816">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17817">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17818">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17819">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17820">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17821">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17822">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17823">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17824">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcs</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC services to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvc</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17825">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17826">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17827">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">false</B>
                  <S N="cli_name">hbacsvcgroups</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">HBAC service groups to remove</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">hbacsvcgroup</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17828">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17829">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">member HBAC service group</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">hbacrule_remove_service</S>
          <Obj N="takes_args" RefId="17830">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17831">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">name</S>
                  <B N="primary_key">true</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Rule name</S>
                  <B N="required">true</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">true</B>
                  <S N="name">cn</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17832">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17833">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Rule name</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="location_show" RefId="17834">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about an IPA location.</S>
          <Obj N="takes_options" RefId="17835">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17836">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17837">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17838">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17839">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17840">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17841">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17842">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17843">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17844">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17845">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17846">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17847">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17848">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17849">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17850">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17851">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17852">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17853">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17854">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17855">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17856">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">location_show</S>
          <Obj N="takes_args" RefId="17857">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17858">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Location name</S>
                  <B N="only_absolute">false</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">IPA location name</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17859">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17860">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="user_remove_principal" RefId="17861">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Remove principal alias from the user entry</S>
          <Obj N="takes_options" RefId="17862">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17863">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17864">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17865">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17866">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17867">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17868">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17869">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17870">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17871">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17872">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17873">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17874">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17875">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17876">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17877">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17878">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17879">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17880">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17881">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17882">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17883">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17884">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">user_remove_principal</S>
          <Obj N="takes_args" RefId="17885">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17886">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">login</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">User login</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">uid</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17887">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">User login</S>
                  <Obj N="flags" RefId="17888">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
              <Obj RefId="17889">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="17890">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">principal</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">PRINCIPAL</S>
                  <B N="alwaysask">true</B>
                  <S N="doc">Principal alias</S>
                  <B N="required">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">krbprincipalname</S>
                  <B N="autofill">true</B>
                  <Obj N="flags" RefId="17891">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <B N="require_service">false</B>
                  <B N="attribute">true</B>
                  <B N="multivalue">true</B>
                  <S N="label">Principal alias</S>
                  <S N="type">Principal</S>
                  <S N="class">Principal</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="domainlevel_set" RefId="17892">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Change current Domain Level.</S>
          <Obj N="takes_options" RefId="17893">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17894">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17895">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17896">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17897">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">domainlevel_set</S>
          <Obj N="takes_args" RefId="17898">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17899">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">level</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17900">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Domain Level</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipadomainlevel</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">Domain Level</S>
                  <B N="required">true</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17901">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsconfig_mod" RefId="17902">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Modify global DNS configuration.</S>
          <Obj N="takes_options" RefId="17903">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17904">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">forwarder</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Global forwarders. A custom port can be specified for each forwarder using a standard format "IP_ADDRESS port PORT"</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">idnsforwarders</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17905">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17906">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">true</B>
                  <S N="label">Global forwarders</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17907">
                <TNRef RefId="0" />
                <MS>
                  <Obj N="deprecated_cli_aliases" RefId="17908">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="cli_name">forward_policy</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">['only', 'first', 'none']</S>
                  <B N="alwaysask">false</B>
                  <S N="name">idnsforwardpolicy</S>
                  <S N="doc">Global forwarding policy. Set to "none" to disable any configured global forwarders.</S>
                  <B N="required">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Forward policy</S>
                  <Obj N="values" RefId="17909">
                    <TNRef RefId="1" />
                    <LST>
                      <S>only</S>
                      <S>first</S>
                      <S>none</S>
                    </LST>
                  </Obj>
                  <B N="autofill">false</B>
                  <B N="multivalue">false</B>
                  <I32 N="sortorder">2</I32>
                  <B N="attribute">true</B>
                  <Obj N="flags" RefId="17910">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="query">false</B>
                  <S N="type">unicode</S>
                  <S N="class">StrEnum</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17911">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">allow_sync_ptr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <Obj N="falsehoods" RefId="17912">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Allow PTR sync</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Bool</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsallowsyncptr</S>
                  <S N="cli_metavar">BOOL</S>
                  <S N="doc">Allow synchronization of forward (A, AAAA) and reverse (PTR) records</S>
                  <B N="required">false</B>
                  <Obj N="truths" RefId="17913">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17914">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17915">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17916">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">zone_refresh</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17917">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone refresh interval</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnszonerefresh</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">An interval between regular polls of the name server for new DNS zones</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">0</I32>
                  <Obj N="flags" RefId="17918">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">true</B>
                </MS>
              </Obj>
              <Obj RefId="17919">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">ipadnsversion</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17920">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">IPA DNS version</S>
                  <B N="multivalue">false</B>
                  <Obj N="include" RefId="17921">
                    <TNRef RefId="1" />
                    <LST>
                      <S>installer</S>
                      <S>updates</S>
                    </LST>
                  </Obj>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">ipadnsversion</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">IPA DNS version</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">-2147483648</I32>
                  <Obj N="flags" RefId="17922">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17923">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17924">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17925">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17926">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17927">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17928">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17929">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17930">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17931">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">delattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17932">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;delattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">delattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Delete an attribute/value pair. The option will be evaluated_x000A_last, after all sets and adds.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17933">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17934">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17935">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17936">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17937">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17938">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17939">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17940">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17941">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17942">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17943">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17944">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17945">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17946">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17947">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17948">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17949">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17950">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17951">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17952">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17953">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17954">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17955">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsconfig_mod</S>
          <Obj N="takes_args" RefId="17956">
            <TNRef RefId="1" />
            <LST />
          </Obj>
        </MS>
      </Obj>
      <Obj N="dnsforwardzone_show" RefId="17957">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Display information about a DNS forward zone.</S>
          <Obj N="takes_options" RefId="17958">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17959">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">rights</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="17960">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">Rights</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">rights</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Display the access rights of this entry (requires --all). See ipa man page for details.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17961">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17962">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17963">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17964">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17965">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17966">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17967">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17968">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17969">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17970">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="17971">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="17972">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="17973">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="17974">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17975">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17976">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17977">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17978">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17979">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">dnsforwardzone_show</S>
          <Obj N="takes_args" RefId="17980">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17981">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">true</B>
                  <B N="only_relative">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="label">Zone name</S>
                  <B N="only_absolute">true</B>
                  <B N="multivalue">false</B>
                  <S N="type">DNSName</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">DNSNameParam</S>
                  <B N="no_convert">false</B>
                  <S N="name">idnsname</S>
                  <S N="cli_metavar">DNSNAMEPARAM</S>
                  <S N="doc">Zone name (FQDN)</S>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="17982">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17983">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
      <Obj N="group_add" RefId="17984">
        <TNRef RefId="0" />
        <MS>
          <B N="NO_CLI">false</B>
          <S N="doc">Create a new group.</S>
          <Obj N="takes_options" RefId="17985">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="17986">
                <TNRef RefId="0" />
                <MS>
                  <B N="attribute">true</B>
                  <S N="cli_name">desc</S>
                  <B N="primary_key">false</B>
                  <S N="cli_metavar">STR</S>
                  <B N="alwaysask">false</B>
                  <S N="doc">Group description</S>
                  <B N="required">false</B>
                  <B N="noextrawhitespace">true</B>
                  <B N="confirm">true</B>
                  <B N="query">false</B>
                  <S N="name">description</S>
                  <B N="autofill">false</B>
                  <Obj N="flags" RefId="17987">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="sortorder">2</I32>
                  <Obj N="deprecated_cli_aliases" RefId="17988">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="multivalue">false</B>
                  <S N="label">Description</S>
                  <S N="type">unicode</S>
                  <S N="class">Str</S>
                  <B N="deprecated">false</B>
                  <B N="no_convert">false</B>
                </MS>
              </Obj>
              <Obj RefId="17989">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">gid</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17990">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">GID</S>
                  <B N="multivalue">false</B>
                  <S N="type">int</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Int</S>
                  <B N="no_convert">false</B>
                  <S N="name">gidnumber</S>
                  <S N="cli_metavar">INT</S>
                  <S N="doc">GID (use this option to set it manually)</S>
                  <B N="required">false</B>
                  <I32 N="maxvalue">2147483647</I32>
                  <I32 N="minvalue">1</I32>
                  <Obj N="flags" RefId="17991">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17992">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">setattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17993">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;setattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">setattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Set an attribute to a name/value pair. Format is attr=value._x000A_For multi-valued attributes, the command replaces the values already present.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17994">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17995">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="17996">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">addattr</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="17997">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;addattr&gt;</S>
                  <B N="multivalue">true</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">addattr</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Add an attribute/value pair. Format is attr=value. The attribute_x000A_must be part of the schema.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="17998">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="17999">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18000">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">nonposix</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="18001">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;nonposix&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">nonposix</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Create as a non-POSIX group</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="18002">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="18003">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18004">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18005">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">external</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <Obj N="falsehoods" RefId="18006">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;external&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">external</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Allow adding external non-IPA members from trusted domains</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="18007">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="18008">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18009">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18010">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">all</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="18011">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="18012">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;all&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">all</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Retrieve and print all attributes from the server. Affects command output.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="18013">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="18014">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18015">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18016">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">raw</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="18017">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="18018">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;raw&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">raw</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Print entries as stored on the server. Only affects output format.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="18019">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="18020">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18021">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18022">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">version</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">false</B>
                  <Obj N="exclude" RefId="18023">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="query">false</B>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">&lt;version&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">version</S>
                  <S N="cli_metavar">STR</S>
                  <S N="doc">Client version. Used to determine if server will accept request.</S>
                  <B N="required">false</B>
                  <Obj N="deprecated_cli_aliases" RefId="18024">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18025">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_option</S>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
              <Obj RefId="18026">
                <TNRef RefId="0" />
                <MS>
                  <S N="cli_name">no_members</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">false</B>
                  <B N="autofill">true</B>
                  <B N="query">false</B>
                  <Obj N="falsehoods" RefId="18027">
                    <TNRef RefId="1" />
                    <LST>
                      <I32>0</I32>
                      <S>0</S>
                      <S>false</S>
                      <S>FALSE</S>
                    </LST>
                  </Obj>
                  <Obj N="exclude" RefId="18028">
                    <TNRef RefId="1" />
                    <LST>
                      <S>webui</S>
                    </LST>
                  </Obj>
                  <B N="primary_key">false</B>
                  <B N="confirm">true</B>
                  <S N="label">&lt;no_members&gt;</S>
                  <B N="multivalue">false</B>
                  <S N="type">bool</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Flag</S>
                  <B N="no_convert">false</B>
                  <S N="name">no_members</S>
                  <S N="cli_metavar">FLAG</S>
                  <B N="default">false</B>
                  <S N="doc">Suppress processing of membership attributes.</S>
                  <B N="required">true</B>
                  <Obj N="truths" RefId="18029">
                    <TNRef RefId="1" />
                    <LST>
                      <S>1</S>
                      <I32>1</I32>
                      <S>true</S>
                      <S>TRUE</S>
                    </LST>
                  </Obj>
                  <Obj N="deprecated_cli_aliases" RefId="18030">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <Obj N="flags" RefId="18031">
                    <TNRef RefId="1" />
                    <LST>
                      <S>no_output</S>
                    </LST>
                  </Obj>
                  <B N="deprecated">false</B>
                </MS>
              </Obj>
            </LST>
          </Obj>
          <S N="name">group_add</S>
          <Obj N="takes_args" RefId="18032">
            <TNRef RefId="1" />
            <LST>
              <Obj RefId="18033">
                <TNRef RefId="0" />
                <MS>
                  <S N="pattern_errmsg">may only include letters, numbers, _, -, . and $</S>
                  <S N="cli_name">group_name</S>
                  <B N="alwaysask">false</B>
                  <B N="attribute">true</B>
                  <B N="autofill">false</B>
                  <B N="query">false</B>
                  <B N="primary_key">true</B>
                  <B N="confirm">true</B>
                  <S N="pattern">^[a-zA-Z0-9_.][a-zA-Z0-9_.-]*[a-zA-Z0-9_.$-]?$</S>
                  <B N="noextrawhitespace">true</B>
                  <S N="label">Group name</S>
                  <B N="multivalue">false</B>
                  <S N="type">unicode</S>
                  <I32 N="sortorder">2</I32>
                  <S N="class">Str</S>
                  <B N="no_convert">false</B>
                  <S N="name">cn</S>
                  <S N="cli_metavar">STR</S>
                  <B N="deprecated">false</B>
                  <B N="required">true</B>
                  <Obj N="deprecated_cli_aliases" RefId="18034">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <S N="doc">Group name</S>
                  <Obj N="flags" RefId="18035">
                    <TNRef RefId="1" />
                    <LST />
                  </Obj>
                  <I32 N="maxlength">255</I32>
                </MS>
              </Obj>
            </LST>
          </Obj>
        </MS>
      </Obj>
    </MS>
  </Obj>
</Objs>