Round 486-490: PAM, LDAP, Kerberos, RADIUS, FreeIPA, 389DS, OpenLDAP, Samba, NFS, CIFS, GlusterFS, CephFS, MinIO, SeaweedFS, JuiceFS, LakeFS, Rook, Longhorn, OpenEBS, Portworx (100 commands)

ober

78c8b90054713b9cade35631c3935fe31ea3dbfa

diff --git a/docs/jemacs-vs-emacs.md b/docs/jemacs-vs-emacs.md
index 3f84964..cc45919 100644
--- a/docs/jemacs-vs-emacs.md
+++ b/docs/jemacs-vs-emacs.md
@@ -4583,6 +4583,131 @@ No remaining Tier 1 gaps. All core editing, completion, and navigation features 
 | ebib-import-file | :orange_circle: | Import file into Ebib |
 | ebib-push-citation | :orange_circle: | Push Ebib citation to buffer |
 
+### Round 490 — Rook ext, Longhorn ext, OpenEBS ext, Portworx ext
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| `rook-ceph` | :orange_circle: Scaffolded | Rook: manage Ceph cluster |
+| `rook-nfs` | :orange_circle: Scaffolded | Rook: NFS provisioner |
+| `rook-operator` | :orange_circle: Scaffolded | Rook: operator status |
+| `rook-toolbox` | :orange_circle: Scaffolded | Rook: toolbox access |
+| `rook-dashboard` | :orange_circle: Scaffolded | Rook: dashboard |
+| `longhorn-volume` | :orange_circle: Scaffolded | Longhorn: manage volumes |
+| `longhorn-backup` | :orange_circle: Scaffolded | Longhorn: backup management |
+| `longhorn-snapshot` | :orange_circle: Scaffolded | Longhorn: snapshot management |
+| `longhorn-engine` | :orange_circle: Scaffolded | Longhorn: engine status |
+| `longhorn-replica` | :orange_circle: Scaffolded | Longhorn: replica management |
+| `openebs-cstor` | :orange_circle: Scaffolded | OpenEBS: cStor pool |
+| `openebs-jiva` | :orange_circle: Scaffolded | OpenEBS: Jiva volumes |
+| `openebs-lvm` | :orange_circle: Scaffolded | OpenEBS: LVM local PV |
+| `openebs-zfs` | :orange_circle: Scaffolded | OpenEBS: ZFS local PV |
+| `openebs-mayastor` | :orange_circle: Scaffolded | OpenEBS: Mayastor |
+| `portworx-volume` | :orange_circle: Scaffolded | Portworx: volume management |
+| `portworx-snapshot` | :orange_circle: Scaffolded | Portworx: snapshots |
+| `portworx-pool` | :orange_circle: Scaffolded | Portworx: storage pool |
+| `portworx-cluster` | :orange_circle: Scaffolded | Portworx: cluster status |
+| `portworx-auth` | :orange_circle: Scaffolded | Portworx: authentication |
+
+### Round 489 — MinIO ext2, SeaweedFS ext, JuiceFS ext, LakeFS ext2
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| `minio-bucket` | :orange_circle: Scaffolded | MinIO: bucket management |
+| `minio-policy` | :orange_circle: Scaffolded | MinIO: policy management |
+| `minio-user` | :orange_circle: Scaffolded | MinIO: user management |
+| `minio-replicate` | :orange_circle: Scaffolded | MinIO: replication |
+| `minio-heal` | :orange_circle: Scaffolded | MinIO: heal objects |
+| `seaweedfs-volume` | :orange_circle: Scaffolded | SeaweedFS: volume server |
+| `seaweedfs-filer` | :orange_circle: Scaffolded | SeaweedFS: filer management |
+| `seaweedfs-master` | :orange_circle: Scaffolded | SeaweedFS: master status |
+| `seaweedfs-mount` | :orange_circle: Scaffolded | SeaweedFS: FUSE mount |
+| `seaweedfs-status` | :orange_circle: Scaffolded | SeaweedFS: cluster status |
+| `juicefs-mount` | :orange_circle: Scaffolded | JuiceFS: mount filesystem |
+| `juicefs-status` | :orange_circle: Scaffolded | JuiceFS: status |
+| `juicefs-bench` | :orange_circle: Scaffolded | JuiceFS: benchmark |
+| `juicefs-gc` | :orange_circle: Scaffolded | JuiceFS: garbage collection |
+| `juicefs-dump` | :orange_circle: Scaffolded | JuiceFS: dump metadata |
+| `lakefs-repository` | :orange_circle: Scaffolded | LakeFS: repository management |
+| `lakefs-tag` | :orange_circle: Scaffolded | LakeFS: tag management |
+| `lakefs-actions` | :orange_circle: Scaffolded | LakeFS: actions/hooks |
+| `lakefs-export` | :orange_circle: Scaffolded | LakeFS: export data |
+| `lakefs-gc` | :orange_circle: Scaffolded | LakeFS: garbage collection |
+
+### Round 488 — NFS ext, CIFS ext, GlusterFS ext, CephFS ext
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| `nfs-exports` | :orange_circle: Scaffolded | NFS: manage exports |
+| `nfs-mount` | :orange_circle: Scaffolded | NFS: mount shares |
+| `nfs-status` | :orange_circle: Scaffolded | NFS: server status |
+| `nfs-stat` | :orange_circle: Scaffolded | NFS: statistics |
+| `nfs-quotas` | :orange_circle: Scaffolded | NFS: quota management |
+| `cifs-mount` | :orange_circle: Scaffolded | CIFS: mount shares |
+| `cifs-status` | :orange_circle: Scaffolded | CIFS: connection status |
+| `cifs-credentials` | :orange_circle: Scaffolded | CIFS: credential management |
+| `cifs-info` | :orange_circle: Scaffolded | CIFS: share info |
+| `cifs-idmap` | :orange_circle: Scaffolded | CIFS: ID mapping |
+| `glusterfs-volume` | :orange_circle: Scaffolded | GlusterFS: volume management |
+| `glusterfs-peer` | :orange_circle: Scaffolded | GlusterFS: peer management |
+| `glusterfs-brick` | :orange_circle: Scaffolded | GlusterFS: brick operations |
+| `glusterfs-heal` | :orange_circle: Scaffolded | GlusterFS: self-heal |
+| `glusterfs-quota` | :orange_circle: Scaffolded | GlusterFS: quota management |
+| `cephfs-mount` | :orange_circle: Scaffolded | CephFS: mount filesystem |
+| `cephfs-status` | :orange_circle: Scaffolded | CephFS: status |
+| `cephfs-snap` | :orange_circle: Scaffolded | CephFS: snapshots |
+| `cephfs-auth` | :orange_circle: Scaffolded | CephFS: authentication |
+| `cephfs-quota` | :orange_circle: Scaffolded | CephFS: quota management |
+
+### Round 487 — FreeIPA ext, 389DS ext, OpenLDAP ext, Samba ext
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| `freeipa-user` | :orange_circle: Scaffolded | FreeIPA: user management |
+| `freeipa-group` | :orange_circle: Scaffolded | FreeIPA: group management |
+| `freeipa-host` | :orange_circle: Scaffolded | FreeIPA: host management |
+| `freeipa-cert` | :orange_circle: Scaffolded | FreeIPA: certificate management |
+| `freeipa-dns` | :orange_circle: Scaffolded | FreeIPA: DNS management |
+| `ds389-status` | :orange_circle: Scaffolded | 389DS: server status |
+| `ds389-backup` | :orange_circle: Scaffolded | 389DS: backup |
+| `ds389-replication` | :orange_circle: Scaffolded | 389DS: replication |
+| `ds389-schema` | :orange_circle: Scaffolded | 389DS: schema management |
+| `ds389-monitor` | :orange_circle: Scaffolded | 389DS: monitoring |
+| `openldap-config` | :orange_circle: Scaffolded | OpenLDAP: configuration |
+| `openldap-slapcat` | :orange_circle: Scaffolded | OpenLDAP: slapcat export |
+| `openldap-slapadd` | :orange_circle: Scaffolded | OpenLDAP: slapadd import |
+| `openldap-replication` | :orange_circle: Scaffolded | OpenLDAP: replication |
+| `openldap-monitor` | :orange_circle: Scaffolded | OpenLDAP: monitoring |
+| `samba-status` | :orange_circle: Scaffolded | Samba: server status |
+| `samba-users` | :orange_circle: Scaffolded | Samba: user management |
+| `samba-shares` | :orange_circle: Scaffolded | Samba: share management |
+| `samba-domain` | :orange_circle: Scaffolded | Samba: domain controller |
+| `samba-join` | :orange_circle: Scaffolded | Samba: domain join |
+
+### Round 486 — PAM ext, LDAP ext, Kerberos ext2, RADIUS ext2
+
+| Feature | Status | Notes |
+|---------|--------|-------|
+| `pam-modules` | :orange_circle: Scaffolded | PAM: list modules |
+| `pam-limits` | :orange_circle: Scaffolded | PAM: resource limits |
+| `pam-access` | :orange_circle: Scaffolded | PAM: access control |
+| `pam-faillock` | :orange_circle: Scaffolded | PAM: faillock management |
+| `pam-pwquality` | :orange_circle: Scaffolded | PAM: password quality |
+| `ldap-search` | :orange_circle: Scaffolded | LDAP: search entries |
+| `ldap-add` | :orange_circle: Scaffolded | LDAP: add entries |
+| `ldap-modify` | :orange_circle: Scaffolded | LDAP: modify entries |
+| `ldap-delete` | :orange_circle: Scaffolded | LDAP: delete entries |
+| `ldap-compare` | :orange_circle: Scaffolded | LDAP: compare attributes |
+| `kerberos-kinit` | :orange_circle: Scaffolded | Kerberos: initialize ticket |
+| `kerberos-klist` | :orange_circle: Scaffolded | Kerberos: list tickets |
+| `kerberos-kdestroy` | :orange_circle: Scaffolded | Kerberos: destroy tickets |
+| `kerberos-kpasswd` | :orange_circle: Scaffolded | Kerberos: change password |
+| `kerberos-ktutil` | :orange_circle: Scaffolded | Kerberos: keytab utility |
+| `radius-test` | :orange_circle: Scaffolded | RADIUS: test authentication |
+| `radius-debug` | :orange_circle: Scaffolded | RADIUS: debug mode |
+| `radius-clients` | :orange_circle: Scaffolded | RADIUS: client management |
+| `radius-users` | :orange_circle: Scaffolded | RADIUS: user management |
+| `radius-proxy` | :orange_circle: Scaffolded | RADIUS: proxy configuration |
+
 ### Round 485 — inotify ext, fanotify ext, dbus-monitor ext, udev ext
 
 | Feature | Emacs | jemacs | Status |
diff --git a/src/jerboa-emacs/editor-extra-final.ss b/src/jerboa-emacs/editor-extra-final.ss
index f70aa1d..e9bf8a8 100644
--- a/src/jerboa-emacs/editor-extra-final.ss
+++ b/src/jerboa-emacs/editor-extra-final.ss
@@ -32022,3 +32022,291 @@
 (def (cmd-udev-test app)
   (let* ((echo (app-state-echo app)))
     (echo-message! echo "udev: test rules")))
+
+;; ── Round 487 — OpenLDAP ext, Samba ext ──
+
+(def (cmd-openldap-config app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenLDAP: configuration")))
+
+(def (cmd-openldap-slapcat app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenLDAP: slapcat")))
+
+(def (cmd-openldap-slapadd app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenLDAP: slapadd")))
+
+(def (cmd-openldap-replication app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenLDAP: replication")))
+
+(def (cmd-openldap-monitor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenLDAP: monitor")))
+
+(def (cmd-samba-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Samba: status")))
+
+(def (cmd-samba-users app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Samba: users")))
+
+(def (cmd-samba-shares app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Samba: shares")))
+
+(def (cmd-samba-domain app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Samba: domain")))
+
+(def (cmd-samba-join app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Samba: domain join")))
+
+;; ── Round 488 — NFS ext, CIFS ext, GlusterFS ext, CephFS ext ──
+
+(def (cmd-nfs-exports app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "NFS: exports")))
+
+(def (cmd-nfs-mount app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "NFS: mount")))
+
+(def (cmd-nfs-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "NFS: status")))
+
+(def (cmd-nfs-stat app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "NFS: statistics")))
+
+(def (cmd-nfs-quotas app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "NFS: quotas")))
+
+(def (cmd-cifs-mount app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CIFS: mount")))
+
+(def (cmd-cifs-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CIFS: status")))
+
+(def (cmd-cifs-credentials app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CIFS: credentials")))
+
+(def (cmd-cifs-info app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CIFS: info")))
+
+(def (cmd-cifs-idmap app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CIFS: ID mapping")))
+
+(def (cmd-glusterfs-volume app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "GlusterFS: volume")))
+
+(def (cmd-glusterfs-peer app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "GlusterFS: peer")))
+
+(def (cmd-glusterfs-brick app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "GlusterFS: brick")))
+
+(def (cmd-glusterfs-heal app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "GlusterFS: heal")))
+
+(def (cmd-glusterfs-quota app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "GlusterFS: quota")))
+
+(def (cmd-cephfs-mount app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CephFS: mount")))
+
+(def (cmd-cephfs-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CephFS: status")))
+
+(def (cmd-cephfs-snap app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CephFS: snapshot")))
+
+(def (cmd-cephfs-auth app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CephFS: auth")))
+
+(def (cmd-cephfs-quota app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "CephFS: quota")))
+
+;; ── Round 489 — MinIO ext2, SeaweedFS ext, JuiceFS ext, LakeFS ext2 ──
+
+(def (cmd-minio-bucket app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "MinIO: bucket management")))
+
+(def (cmd-minio-policy app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "MinIO: policy")))
+
+(def (cmd-minio-user app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "MinIO: user management")))
+
+(def (cmd-minio-replicate app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "MinIO: replication")))
+
+(def (cmd-minio-heal app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "MinIO: heal")))
+
+(def (cmd-seaweedfs-volume app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "SeaweedFS: volume")))
+
+(def (cmd-seaweedfs-filer app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "SeaweedFS: filer")))
+
+(def (cmd-seaweedfs-master app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "SeaweedFS: master")))
+
+(def (cmd-seaweedfs-mount app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "SeaweedFS: mount")))
+
+(def (cmd-seaweedfs-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "SeaweedFS: status")))
+
+(def (cmd-juicefs-mount app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "JuiceFS: mount")))
+
+(def (cmd-juicefs-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "JuiceFS: status")))
+
+(def (cmd-juicefs-bench app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "JuiceFS: benchmark")))
+
+(def (cmd-juicefs-gc app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "JuiceFS: garbage collection")))
+
+(def (cmd-juicefs-dump app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "JuiceFS: dump metadata")))
+
+(def (cmd-lakefs-repository app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LakeFS: repository")))
+
+(def (cmd-lakefs-tag app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LakeFS: tag")))
+
+(def (cmd-lakefs-actions app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LakeFS: actions")))
+
+(def (cmd-lakefs-export app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LakeFS: export")))
+
+(def (cmd-lakefs-gc app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LakeFS: garbage collection")))
+
+;; ── Round 490 — Rook ext, Longhorn ext, OpenEBS ext, Portworx ext ──
+
+(def (cmd-rook-ceph app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Rook: Ceph cluster")))
+
+(def (cmd-rook-nfs app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Rook: NFS")))
+
+(def (cmd-rook-operator app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Rook: operator")))
+
+(def (cmd-rook-toolbox app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Rook: toolbox")))
+
+(def (cmd-rook-dashboard app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Rook: dashboard")))
+
+(def (cmd-longhorn-volume app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Longhorn: volume")))
+
+(def (cmd-longhorn-backup app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Longhorn: backup")))
+
+(def (cmd-longhorn-snapshot app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Longhorn: snapshot")))
+
+(def (cmd-longhorn-engine app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Longhorn: engine")))
+
+(def (cmd-longhorn-replica app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Longhorn: replica")))
+
+(def (cmd-openebs-cstor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenEBS: cStor")))
+
+(def (cmd-openebs-jiva app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenEBS: Jiva")))
+
+(def (cmd-openebs-lvm app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenEBS: LVM")))
+
+(def (cmd-openebs-zfs app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenEBS: ZFS")))
+
+(def (cmd-openebs-mayastor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "OpenEBS: Mayastor")))
+
+(def (cmd-portworx-volume app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Portworx: volume")))
+
+(def (cmd-portworx-snapshot app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Portworx: snapshot")))
+
+(def (cmd-portworx-pool app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Portworx: pool")))
+
+(def (cmd-portworx-cluster app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Portworx: cluster")))
+
+(def (cmd-portworx-auth app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Portworx: auth")))
diff --git a/src/jerboa-emacs/editor-extra-modes.ss b/src/jerboa-emacs/editor-extra-modes.ss
index 77f2aee..3de72ad 100644
--- a/src/jerboa-emacs/editor-extra-modes.ss
+++ b/src/jerboa-emacs/editor-extra-modes.ss
@@ -31408,3 +31408,129 @@
 (def (cmd-ltrace-summary app)
   (let* ((echo (app-state-echo app)))
     (echo-message! echo "ltrace: summary")))
+
+;; ── Round 486 — PAM ext, LDAP ext, Kerberos ext2, RADIUS ext2 ──
+
+(def (cmd-pam-modules app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "PAM: list modules")))
+
+(def (cmd-pam-limits app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "PAM: limits")))
+
+(def (cmd-pam-access app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "PAM: access rules")))
+
+(def (cmd-pam-faillock app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "PAM: faillock")))
+
+(def (cmd-pam-pwquality app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "PAM: password quality")))
+
+(def (cmd-ldap-search app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LDAP: search")))
+
+(def (cmd-ldap-add app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LDAP: add entry")))
+
+(def (cmd-ldap-modify app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LDAP: modify entry")))
+
+(def (cmd-ldap-delete app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LDAP: delete entry")))
+
+(def (cmd-ldap-compare app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "LDAP: compare")))
+
+;; ── Round 487 — FreeIPA ext, 389DS ext, OpenLDAP ext, Samba ext ──
+
+(def (cmd-kerberos-kinit app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Kerberos: kinit")))
+
+(def (cmd-kerberos-klist app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Kerberos: klist")))
+
+(def (cmd-kerberos-kdestroy app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Kerberos: kdestroy")))
+
+(def (cmd-kerberos-kpasswd app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Kerberos: kpasswd")))
+
+(def (cmd-kerberos-ktutil app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "Kerberos: ktutil")))
+
+(def (cmd-radius-test app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "RADIUS: test auth")))
+
+(def (cmd-radius-debug app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "RADIUS: debug mode")))
+
+(def (cmd-radius-clients app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "RADIUS: clients")))
+
+(def (cmd-radius-users app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "RADIUS: users")))
+
+(def (cmd-radius-proxy app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "RADIUS: proxy")))
+
+;; ── Round 488 — NFS ext, CIFS ext, GlusterFS ext, CephFS ext ──
+
+(def (cmd-freeipa-user app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "FreeIPA: user management")))
+
+(def (cmd-freeipa-group app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "FreeIPA: group management")))
+
+(def (cmd-freeipa-host app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "FreeIPA: host management")))
+
+(def (cmd-freeipa-cert app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "FreeIPA: certificates")))
+
+(def (cmd-freeipa-dns app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "FreeIPA: DNS")))
+
+(def (cmd-ds389-status app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "389DS: status")))
+
+(def (cmd-ds389-backup app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "389DS: backup")))
+
+(def (cmd-ds389-replication app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "389DS: replication")))
+
+(def (cmd-ds389-schema app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "389DS: schema")))
+
+(def (cmd-ds389-monitor app)
+  (let* ((echo (app-state-echo app)))
+    (echo-message! echo "389DS: monitor")))
diff --git a/src/jerboa-emacs/editor-extra-regs2.ss b/src/jerboa-emacs/editor-extra-regs2.ss
index 5c88731..4ca0e97 100644
--- a/src/jerboa-emacs/editor-extra-regs2.ss
+++ b/src/jerboa-emacs/editor-extra-regs2.ss
@@ -11797,4 +11797,110 @@
   (register-command! 'udev-trigger cmd-udev-trigger)
   (register-command! 'udev-settle cmd-udev-settle)
   (register-command! 'udev-test cmd-udev-test)
+
+  ;; Round 486: PAM ext, LDAP ext, Kerberos ext2, RADIUS ext2
+  (register-command! 'pam-modules cmd-pam-modules)
+  (register-command! 'pam-limits cmd-pam-limits)
+  (register-command! 'pam-access cmd-pam-access)
+  (register-command! 'pam-faillock cmd-pam-faillock)
+  (register-command! 'pam-pwquality cmd-pam-pwquality)
+  (register-command! 'ldap-search cmd-ldap-search)
+  (register-command! 'ldap-add cmd-ldap-add)
+  (register-command! 'ldap-modify cmd-ldap-modify)
+  (register-command! 'ldap-delete cmd-ldap-delete)
+  (register-command! 'ldap-compare cmd-ldap-compare)
+  (register-command! 'kerberos-kinit cmd-kerberos-kinit)
+  (register-command! 'kerberos-klist cmd-kerberos-klist)
+  (register-command! 'kerberos-kdestroy cmd-kerberos-kdestroy)
+  (register-command! 'kerberos-kpasswd cmd-kerberos-kpasswd)
+  (register-command! 'kerberos-ktutil cmd-kerberos-ktutil)
+  (register-command! 'radius-test cmd-radius-test)
+  (register-command! 'radius-debug cmd-radius-debug)
+  (register-command! 'radius-clients cmd-radius-clients)
+  (register-command! 'radius-users cmd-radius-users)
+  (register-command! 'radius-proxy cmd-radius-proxy)
+  ;; Round 487: FreeIPA ext, 389DS ext, OpenLDAP ext, Samba ext
+  (register-command! 'freeipa-user cmd-freeipa-user)
+  (register-command! 'freeipa-group cmd-freeipa-group)
+  (register-command! 'freeipa-host cmd-freeipa-host)
+  (register-command! 'freeipa-cert cmd-freeipa-cert)
+  (register-command! 'freeipa-dns cmd-freeipa-dns)
+  (register-command! 'ds389-status cmd-ds389-status)
+  (register-command! 'ds389-backup cmd-ds389-backup)
+  (register-command! 'ds389-replication cmd-ds389-replication)
+  (register-command! 'ds389-schema cmd-ds389-schema)
+  (register-command! 'ds389-monitor cmd-ds389-monitor)
+  (register-command! 'openldap-config cmd-openldap-config)
+  (register-command! 'openldap-slapcat cmd-openldap-slapcat)
+  (register-command! 'openldap-slapadd cmd-openldap-slapadd)
+  (register-command! 'openldap-replication cmd-openldap-replication)
+  (register-command! 'openldap-monitor cmd-openldap-monitor)
+  (register-command! 'samba-status cmd-samba-status)
+  (register-command! 'samba-users cmd-samba-users)
+  (register-command! 'samba-shares cmd-samba-shares)
+  (register-command! 'samba-domain cmd-samba-domain)
+  (register-command! 'samba-join cmd-samba-join)
+  ;; Round 488: NFS ext, CIFS ext, GlusterFS ext, CephFS ext
+  (register-command! 'nfs-exports cmd-nfs-exports)
+  (register-command! 'nfs-mount cmd-nfs-mount)
+  (register-command! 'nfs-status cmd-nfs-status)
+  (register-command! 'nfs-stat cmd-nfs-stat)
+  (register-command! 'nfs-quotas cmd-nfs-quotas)
+  (register-command! 'cifs-mount cmd-cifs-mount)
+  (register-command! 'cifs-status cmd-cifs-status)
+  (register-command! 'cifs-credentials cmd-cifs-credentials)
+  (register-command! 'cifs-info cmd-cifs-info)
+  (register-command! 'cifs-idmap cmd-cifs-idmap)
+  (register-command! 'glusterfs-volume cmd-glusterfs-volume)
+  (register-command! 'glusterfs-peer cmd-glusterfs-peer)
+  (register-command! 'glusterfs-brick cmd-glusterfs-brick)
+  (register-command! 'glusterfs-heal cmd-glusterfs-heal)
+  (register-command! 'glusterfs-quota cmd-glusterfs-quota)
+  (register-command! 'cephfs-mount cmd-cephfs-mount)
+  (register-command! 'cephfs-status cmd-cephfs-status)
+  (register-command! 'cephfs-snap cmd-cephfs-snap)
+  (register-command! 'cephfs-auth cmd-cephfs-auth)
+  (register-command! 'cephfs-quota cmd-cephfs-quota)
+  ;; Round 489: MinIO ext2, SeaweedFS ext, JuiceFS ext, LakeFS ext2
+  (register-command! 'minio-bucket cmd-minio-bucket)
+  (register-command! 'minio-policy cmd-minio-policy)
+  (register-command! 'minio-user cmd-minio-user)
+  (register-command! 'minio-replicate cmd-minio-replicate)
+  (register-command! 'minio-heal cmd-minio-heal)
+  (register-command! 'seaweedfs-volume cmd-seaweedfs-volume)
+  (register-command! 'seaweedfs-filer cmd-seaweedfs-filer)
+  (register-command! 'seaweedfs-master cmd-seaweedfs-master)
+  (register-command! 'seaweedfs-mount cmd-seaweedfs-mount)
+  (register-command! 'seaweedfs-status cmd-seaweedfs-status)
+  (register-command! 'juicefs-mount cmd-juicefs-mount)
+  (register-command! 'juicefs-status cmd-juicefs-status)
+  (register-command! 'juicefs-bench cmd-juicefs-bench)
+  (register-command! 'juicefs-gc cmd-juicefs-gc)
+  (register-command! 'juicefs-dump cmd-juicefs-dump)
+  (register-command! 'lakefs-repository cmd-lakefs-repository)
+  (register-command! 'lakefs-tag cmd-lakefs-tag)
+  (register-command! 'lakefs-actions cmd-lakefs-actions)
+  (register-command! 'lakefs-export cmd-lakefs-export)
+  (register-command! 'lakefs-gc cmd-lakefs-gc)
+  ;; Round 490: Rook ext, Longhorn ext, OpenEBS ext, Portworx ext
+  (register-command! 'rook-ceph cmd-rook-ceph)
+  (register-command! 'rook-nfs cmd-rook-nfs)
+  (register-command! 'rook-operator cmd-rook-operator)
+  (register-command! 'rook-toolbox cmd-rook-toolbox)
+  (register-command! 'rook-dashboard cmd-rook-dashboard)
+  (register-command! 'longhorn-volume cmd-longhorn-volume)
+  (register-command! 'longhorn-backup cmd-longhorn-backup)
+  (register-command! 'longhorn-snapshot cmd-longhorn-snapshot)
+  (register-command! 'longhorn-engine cmd-longhorn-engine)
+  (register-command! 'longhorn-replica cmd-longhorn-replica)
+  (register-command! 'openebs-cstor cmd-openebs-cstor)
+  (register-command! 'openebs-jiva cmd-openebs-jiva)
+  (register-command! 'openebs-lvm cmd-openebs-lvm)
+  (register-command! 'openebs-zfs cmd-openebs-zfs)
+  (register-command! 'openebs-mayastor cmd-openebs-mayastor)
+  (register-command! 'portworx-volume cmd-portworx-volume)
+  (register-command! 'portworx-snapshot cmd-portworx-snapshot)
+  (register-command! 'portworx-pool cmd-portworx-pool)
+  (register-command! 'portworx-cluster cmd-portworx-cluster)
+  (register-command! 'portworx-auth cmd-portworx-auth)
 )