=== RoAk is now known as RoAkSoAx === none3 is now known as giovani [01:48] I am having trouble talking to an internal internet ldap service, and our admin is guessing it's because I need the company certificates properly installed. We tried /etc/ldap/cacerts, and that didn't go. [01:52] I saw one once that I liked but never played w/ setting up [02:12] !imp [02:12] Sorry, I don't know anything about imp [02:12] !horde [02:12] Sorry, I don't know anything about horde [02:13] !info horde3 [02:13] horde3 (source: horde3): horde web application framework. In component universe, is optional. Version 3.2.2+debian0-2 (jaunty), package size 7063 kB, installed size 27132 kB [02:19] So, can I utilize landscape without paying for it? [02:31] Say, anyone around who would be able to talk me through the concepts involved in setting up an LDAP-hosted address book with fields I could define for things like different IM protocol usernames? I'd really like to consolidate all of my scattered information... [02:32] AIUI only the client side of landscape is free software. [02:32] The server side is locked up inside canonical. [02:32] Where "server" is the puppetmaster and "client" is the puppet, in puppet/cfengine terms. [02:46] hello [02:48] I am trying to configure fetchmail to grab mail from exchange so I can read with mutt I have this line on .fetchmailrc: poll trunks.engenet.com.br proto imap user "renato.rodrigues" password "hulk01" [02:48] although I get authfail message [02:48] instead of trying to connect to fevel@trunks.engenet it tries fevel@mail.engenet [03:03] i add new nic on my 8.04.2 but it's not running [03:04] 1 card was installed during installation [03:04] and when i installed the other card ubuntu doesn't know it [03:04] what should i do? [03:22] how to install new NIC? [03:34] Do i need a different certificate for every site at my server? [03:34] due to change in cn? [04:07] error404notfound: just use a wildcard cert [04:07] Sam-I-Am, hmmm, how do i create that? also googling in bg [04:07] and it'll be subjectaltname, not CN [04:10] rsr: don't use fetchmail for imap. [04:10] rsr: use offlineimap. [04:13] mutt does a pretty good job of reading imap [04:46] Can anyone point me in the direction of a cheapish (~200USD), low power (less than 100w), with dual NICs and preferably silent, server hardware? My first thought was a first gen eeepc but there is the dual NIC issue (as this will be a router, file/print/media, LAMP server for the home). I'm finding quite a few 1u servers on ebay but they're all fairly high-powered. [04:48] whack a usb/pcmcia/express dongle into $laptop? === pace_t_zulu_ is now known as pace_t_zulu [04:49] Kamping_Kaiser: good idea. any that you'd prefer (or at least avoid)? [04:51] Dittohead, not particularly (I dont know whats around for $200US) [04:54] Was more in reference to a particular dongle you'd use. I'm finding eeepc 900s for under 200 on ebay. [04:56] ah right. usb ones are probably the most portable (eg, could remove laptop one day and plug dongle into new one), but pcmcia/express are less likely to break at the connection to the laptop [05:00] Kamping_Kaiser: thanks! [05:01] np [05:03] Dittohead: you can run two networks over a single NIC, using vlan tagging. [05:04] This will require either linux, sun or cisco gear on the other end of the cable. [05:04] twb: my dd-wrt access point would support this, but I doubt the motorola wimax modem would. [05:05] Dittohead: uh, why would the modem need it? [05:05] You only need tagging on two two ports that the cable connects to. [05:05] s/two two/the two/ [05:06] FWIW I've done vlanning between an OpenWRT and an 8.04 server in exactly that configuration. [05:07] I mean, obviously it's better to just slap a second NIC in, but (as in your case) there wasn't room in the server. [05:09] twb: The server would act as a replacement of my current wireless router (or rather to replace the router function between the modem and the network, I'd still use the wifi AP functionality). If the modem doesn't support vlan tagging, and I don't have a tagging-capable switch in between the two then I can't make it work, right? [05:09] (I've not done much with vlan'ing so forgive my ignorance!) [05:09] What's wrong with your existing DD-WRT? [05:10] To answer your question: it depends on what connects your wifi modem to your router/server. If it's ethernet, then you're right -- vlanning won't work. If it's USB, that's different. [05:13] I'd wanted to setup VPN capability but my current router but I can't at this point due to NVRAM restrictions on the hardware. That and I want a project. :) [05:14] Sam-I-Am, there? [05:14] Fair enough. [05:14] Sam-I-Am, isn't wild card ssl for domain and all its sub-dmains? or can it be used for all domains on a single host? [05:14] twb: The WiMax modem only has ethernet, which goes into the WAN port of the router. [05:17] Righto. [05:22] error404notfound: its usually for a domain and hosts under it [05:23] error404notfound: in other words, it can do *.domain.com or *.sub.domain.com, but not *.*.domain.com [05:23] you can also list a bunch of hosts in subjectaltname [05:24] Sam-I-Am, say i have www.example.com, www.myhost.com, www.newsite.com, www.topportal.com plus each of these has subdomains under them so how would i create a cert for all of these domains? [05:25] you dont [05:25] you have multiple certs [05:25] but it shouldnt matter much as long as they're legit [05:28] hmmm.... [05:28] hi guys I want to know if there is anyway that I can put my /var/mail.log into a database for per user [05:28] you can only have one wildcard in a cert i think [05:29] but multiple single host/domain combos [05:29] Sam-I-Am, thanks... i guess i will use wildcard ones for subdomain and a single domain, so that way i would have 4 certs for 4 domains and about 25 subdomains [05:30] TimReichhart: might be an app for log management at that level.. or just write a script to parse it out and insert into a database [05:31] well I have been trying to figure out how to parse it out and put it into a database and I cant find anything how to do that [05:32] btw if i create my own openssl certs, everytime a new visitor hits my site, he will have to accept my cert manually, is there a (possibly free) workaround of this problem? [05:32] shell script that grabs lines by name and makes an sql insert statement? sounds reasonable. [05:32] error404notfound: check out cacert.org. [05:32] you got any examples there Sam-I-Am [05:32] error404notfound: its community based trust and i know firefox has them as a CA [05:32] other browsers not so much... then you get to pay [05:33] aaah.... great.... thanks... [05:33] TimReichhart: not off the top of my head [05:33] ok [05:33] i had an account there and i forgot [05:33] happens... [05:33] anywho, i gotta get... work at 5am tomorrow [05:36] hi, I'm wondering how I should install a gui on ubuntu server that doesn't start up on boot so I can leave it off when I need the performance [05:36] I'm new to ubuntu [05:37] I just installed ubuntu server on a completely clean machine [05:38] basically it's a new custom machine with a lot of ram being used as a server to run high-load statistical analyses for a university statistics department [05:39] but it might also get used in person by people who don't have much experience with the command line [05:40] yelyos, to install gui, install ubuntu-desktop, kubuntu-desktop, xubuntu-desktop or whichever you like, but take it from me, its a bad practise [05:41] it's not a dedicated server [05:41] it's only mostly a server. [05:41] if it was a dedicated server then yeah [05:41] but given how it's going to be used I'm pretty sure we need a gui on it [05:41] even if the gui is left unstarted most of the time [05:43] I just wanted to know if installing ubuntu-desktop starts up the gui on boot or if it only starts the gui if it's run from the command line [05:55] yelyos: By default it should on boot. [05:55] yelyos: Just remove gdm from the default runlevel not to. [05:56] yelyos: but really you should be asking yourself why your have a gui on a server at all - what purpose will it actulaly serve? [05:56] Do you mean you'll have people sitting down and writing an essay and checking their e-mail on this machine too? [07:25] hi [08:49] most dhcp servers pings an address before assigning it, right? [08:49] is it really necessary to segment networks when running multiple dhcpd servers then? [08:49] Why do you want to run multiple DHCP servers? [08:49] They *will* fight. [08:50] Even if they don't fight for IPs, they will advertise different next-server, routes, dns-servers etc. [08:50] twb: was part of the discussion at the "Architecture of a Directory Infrastructure" session [08:50] highvoltage: sorry, I don't know what that is. [08:51] UDS i'm guessing [08:51] yes [08:51] UDS? [08:52] twb, ubuntu dev summit [08:53] Ah, righto. [08:58] ftr, i didnt know dhcp servers pinged hosts. [09:00] Kamping_Kaiser: I'm not convinced they do. [09:01] I wouldn't be surprised if they did some ARP-level sanity checking, though. [09:01] nod [09:02] anyone here that was at last bof at uds about ldap directory? [09:03] * andreas__ was [09:03] andreas__: i know; have you maybe accidentaly taken my bag? :) [09:03] ivoks: no [09:04] ok [09:04] ivoks: check under the tables [09:04] i did [09:04] hmpf [09:04] highvoltage: in my experience its not necessary to segment your network for running multiple dhcpd servers [09:04] maybe the guy that was between us [09:04] i don't know his name :/ [09:04] ivoks: I remember pushing his back a bit under the table so I could sit [09:04] bag [09:05] highvoltage: a client will ack a dhcp address. All dhcpd servers will notice this ack and mark the address as in use [09:05] ivoks: o/ [09:05] i'll find him [09:06] highvoltage: you were at the session? [09:08] how can someone leave with two bags? :/ [09:08] one for each of him? === jussio1 is now known as jussi01 [09:09] anyone here [09:09] yeh [09:10] ivoks: I was [09:10] ivoks: wait, you're missing a bag with a red cross on it? [09:11] highvoltage: yes [09:11] ivoks: eek, sorry, it must have been under my bag, I did grab it, I'm terribly sorry about that [09:12] ok... could you please return it? :) [09:12] i'm at the room 3 [09:12] in [09:13] ivoks: I only noticed there was another bag when I took mine away just a moment ago, can I give it to you at the projector sscreen where they show the sessions after this session? [09:13] highvoltage: i kind of need it now; battery low [09:13] highvoltage: in which room are you? [09:13] ivoks: ok, where are you, I'll bring it to you since I'm at fault [09:13] highvoltage: room 3 [09:13] ok, be there in a minute [09:14] ok [09:14] highvoltage and ivoks stay together? o.O [09:15] jonathan_: no we're at UDS and I left the last session in a hurry and took his bag my mistake [09:15] ic [09:19] i just finished installing ubuntu server on a proliant dl320 g2 that a friend gave me [09:19] im relatively new to linux and i was wondering whats some cool stuff i can with this server? [09:20] lots of seti@home *grin* [09:22] mufasis, 'cool stuff' is entirely dependant on what you think is cool. [09:23] you can run vmware/virtualbox on it with windows, if that qualifies as cool for you :) [09:25] * Kamping_Kaiser backs away from cemc [09:26] Can someone hlp me with vsftpd [09:26] I keep getting permission deniedc [09:26] yeah vmware my buddy was telling me about it [09:26] what is it exactly? [09:26] Is what? [09:27] When I try to FTP into my server, it only works if im as anonmous. When I try to copy a file to it I get permission denied [09:28] vmware? [09:28] yes [09:30] Would you know what is causing the problem mufasis [10:08] Hello, I'm running a couple of jeos instances as kvm guests, they have trouble mounting an nfs share though, sometimes it works out, sometimes it doesn't, ... what could be the deal here? === Andrew_Office is now known as formatCvt [12:50] hi [12:50] any chance to get ipmisensors working with ubuntu? [13:05] about ipmi: we have HP ProLiant D380 G5 with working ipmi [13:06] the kernel module is what comes with Ubuntu kernel and the user space utility is from HP's "HP System Health Application and Insight Management Agents for Red Hat Enterprise Linux 5 (AMD64/EM64T)" [13:06] but the main thing is that the module that comes with kernel can talk to hardware ipmi [13:07] and the Ubuntu version is 8.04 and kernel is: 2.6.24-23-server #1 SMP Wed Apr 1 22:14:30 UTC 2009 x86_64 GNU/Linux [13:26] Is there a way to utilize ecryptfs when you authenticate with krb5 and authorize with local passwd files? [13:27] In postfix, if I want to accept relays from any machine on the my local network (10.25.25.0), the correct mynetorks setting would be 10.25.25.0\24, correct? === tuxlinux_ is now known as tuxlinux [13:31] dthacker, if you want all 254 addresses to be relayed, yes. http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing [13:31] Pres-Gas: thanks [13:31] All good, dthacker [13:39] dthacker: it's /24, not \24 [13:39] Pres-Gas: and it's 256 addresses, since it really doesn't care about network/broadcast blocks... [13:40] lamont: yes, the slash was wrong [13:40] if the subnet is truly /24, then the fact that .0 and .255 have no connectivity has nothing to do with whether or not postfix would love them if they did... [13:40] dthacker: \ is a windoze thing... in any sane OS, it means "don't apply any special treatment to the next character" [13:41] is there a way to have both kvm and virtualbox working on same machine? [13:54] Hi! Is it to possible to have eucalyptus-cc and eucalyptus-nc on the same host? [13:59] I've got my ftp configured and accepting logins for users on the machine and locking them to their home directory. the web root for users, though, is on a mounted second hard drive and I need to create an alias to their actual www folder that lives on this mounted drive in their home directory so they have access to it via ftp [13:59] or if i'm going about that the wrong way please let me know. but i think you get the idea of what i'm trying to do..?? [14:00] angelleye: create a symbolic link from their ftp home to the web root? [14:00] symbolic link. is that like a shortcut? [14:01] like a windows shortcut? no idea [14:02] i just need it to look like a folder in their home directory even though that actual folder isn't stored there [14:02] symbolic links are like windows shortcuts yeah... [14:02] and i need the ftp to give them access to it [14:02] even though they're locked to their home directory [14:02] ok i'll check that out [14:02] man "ln" [14:02] mount? [14:02] is ther a simple way to do it in nautilus? forgive me, i'm graphically inclined [14:03] :) [14:03] http://en.wikipedia.org/wiki/Symbolic_link#Unix_and_Linux [14:03] sorry, don't know nautilus, pretty much live at the command line [14:07] well, I did ls -s /media/storage www while in my /home/user directory [14:07] it created a www folder in the user directory, when when I go into that it's just an empty www folder [14:07] i mean ln-s [14:08] when i browse it in nautilus now it looks like shortcut folder but it goges to an empty folder [14:08] yeah, it's just /home/user/www [14:08] but the folder icon has an rrow on it like a shortcut [14:25] hello all. I am setting up a basic server. it is a VPS, with 256mb RAM. Currently I am running mysql, apache2, php5 and a session of irssi. I am almost out of memory. does this sound right? It means my install of menalto gallery often runs out of memory [14:26] j0nr, depending on what your doing that could be right, but its also possible to run those services in 128mb too [14:27] Kamping_Kaiser: I thought it was a bit high... if i stop apache and mysql it drops from ~240mb to 85mb [14:28] Kamping_Kaiser: so do you think it is something to do with how mysql and apache are set up to run? [14:29] j0nr, run top and look at its memory column to check whats using all the memory (eg, mysql or apache). I suspect mysql [14:31] i'll say right now i'm not running mysql anyware, so no personal experiance to offer === asac_ is now known as asac [14:36] New bug: #380942 in net-snmp (main) "snmptrapd v5.4.1 seems to have a memory leak much like snmpd in the previous release" [Undecided,New] https://launchpad.net/bugs/380942 [14:38] Kamping_Kaiser: yeah myswl uses the most, then apache and then irssi! [14:38] mysql even [14:39] j0nr, re apache, you can probalby unload some modules your not using to free some memory [14:40] never had to rework those services for 'low memory' systems before [14:52] Regarding https://blueprints.launchpad.net/ubuntu/+spec/server-karmic-puppet-integration, are you sure puppet is the way to go? I’ve been using it for a while now and i’m looking for a replacement because the configuration syntax is not a proper scripting language. If it doesn’t already provide you with certain functionality, you’ll have to extend Puppet separately. For instance, i’ve extended Puppet::Parser::Functions with something that sorts a ... [14:52] ... list, but i can’t even use that as a generic thing in the configuration – only in very specific places, such as file { foo: content => sorted_list(...) }. Another example: puppet’s augeas extension doesn’t allow you to query augeas for something and then set things based on what it returned. If the configuration file were a Ruby script, for instance, you could use the Ruby bindings for augeas directly instead of using a wrapper that restricts ... [14:52] ... the functionality. Chef looks like something i might switch to: http://wiki.opscode.com/display/chef/ [14:53] ttx: You seem to be marked as an “essential” subscriber to the blueprint. Perhaps you could consider this. [14:54] <\sh> ion_: cfengine is the same..no real scripting language..puppet is more to a scripting language then cfengine...and puppet is used by google (AFAIK)...and I chose it too for our servers [14:55] hi which is the package which substitutes ia32-libs on jaunty server? [14:55] im trying to install xampp on a 64 bit machine [14:55] <\sh> eolo999: ia32-libs? [14:56] \sh: yes [14:56] in hardy there is a package called ia32-libs [14:56] in jaunty there is not [14:56] <\sh> eolo999: ia32-libs and yes there is [14:57] mmmmhhhh [14:57] \sh: thx! it was an horrific typo [14:58] Is it to possible to have eucalyptus-cc and eucalyptus-nc on the same host? [14:59] * eolo999 wants to build a puppet/cfengine app written in erlang [15:01] hi, how difficult is it to set up say four installs of ubuntu as a clustered database server [15:02] probably not hard [15:05] Bizzeh: I was just recently looking into high availability postgresql solutions. Previously we had freebsd machines with a custom solution. It looks like Slony for this is about the best bang for the buck. [15:08] genii: im looking to start something from nothing here, only reason i was looking towards a free solution [15:17] Bizzeh: Stock LAMP install on a number of boxes with Slony for database redundancy seems about the best bang-for-the-buck ( $0 ) [15:18] ahh [15:18] running the testing on a single dual core machine right now, gonna set up a VM farm at the weekend to test a custered setup then [15:19] currently have around 8 million rows in 25 tables in 1db, but thats going to grow by about 4 million a day [15:22] Bizzeh: There are also lots of sites with tips to tweak PostgreSQL performance for large installs/speed optimizing etc === zul__ is now known as zul [15:50] <\sh> genii: I had a look at postgres and slony for a company project...and for master slave replication it's a bit too tricky...using those triggers etc. and for active active clusters I didn't find any good solution for postgres (only cybercluster but there is a lack of good documentation and they do some strange rsync+ssh magic fir Large File Objects, whatever that means in this DB context, wasn't documented) [15:51] \sh: For active/active it IS somewhat difficult. I've been on the same type of search for a better solution myself lately. [15:53] <\sh> genii: that's why we choose mysql cluster ... and regarding performance, which is better with postgres, I think more hardware will help here ;) [15:55] \sh: Since I've alread inherited a Postgres-based system (which a bunch of other stuff has been custom-writtten for) migration for us to mysql is unfortunately not an (forseeable) option. [16:09] <\sh> genii: yeah...we have luck to just start with this new project so we had to stresstest all involved systems and we had the chance to choose...but for an already running service this could be quite difficult === tuxlinux_ is now known as tuxlinux [17:51] Just installed 9.04 server with software raid and when I boot I get /dev/md1 does not exist. Anyone came a cross this before? [17:56] anyone? [17:58] what is the command to list users? [17:59] rkitect: which users? [18:00] all users that are currently named on the system. [18:00] cat /etc/passwd [18:00] jmedina: thanks === jmedina is now known as amedina === amedina is now known as jmedina [18:54] question. with using postfix/dovecot i created a user name and it automatically creates an email account for the user. I want to be able to use this email account as outgoing mail only , so that all the incoming mail to this account is rejected. [18:59] orudie: you need to configure postfix, it is well documented http://www.postfix.org/RESTRICTION_CLASS_README.html [19:03] jmedina-> i think i would rather have the mail forwarded from one user to another, any quick way of accomplishing this ? [19:04] orudie: I don know, I always use the procedure described in the document [19:04] you can get more info in postfix mailing lists [19:05] if you look at the postfix mailing lists archives, you can find good examples [19:34] orudie: postfix supports aliases yes ... but I don't know if they can be used the way you want [19:35] orudie: if you don't want every user on the system to have an email account then use virtual hosting, where you define each email address -- and then you can make any aliases you like [19:38] orudie: you can do exactly what you want using postfix and Restrictions Classes, it is not that hard [19:57] It's easy enough to do. [20:54] Hiya. I'm considering installing Ubuntu on a machine with a 1GB SSD for /boot and other small essentials (/etc, /lib, etc) and having /usr mounted over nfs/etc [20:54] has anyone done this from install (as opposed to migrating it) [20:55] 1GB SSD for /boot? [20:55] thats a bit overkill lol [20:55] a 1GB SSD for basically everything but /usr [20:55] you dont need /boot after boot [20:55] maybe /var too [20:56] it is only used/read to read vmlinuz initrd [20:56] I don't see why it wouldn't work, IIRC the base install is ~840MB [20:56] and that is with a ton of stuff in /ust [20:56] my systems have 100GB for /boot, and I use noauto in fstab [20:56] stickystyle: mm, but can I tell the installer to make use of NFS space? [20:56] or is this something I'm going to have to hack together after the fact? [20:58] Ah, I see what your getting at now....Humm, not exactly sure. Perhaps the LTSP could provide some guidance, as they do some thin clients, I would think it could carry over to server. [20:58] LTSP is netboot generally speaking, so not really the same domain :/ [20:58] * lupine_85 is trying to avoid netboot as he wants something that'll boot if the nfs server dies [20:58] I know, but I thought they had some between thin/thick clients that had a base install [20:59] i've not come across it - which is probably a good sign ;). I'll poke 'em - thanks [21:10] You can do in-target commands. [21:11] genii: true enough, but that strikes me as much more hassle than just hacking it after the fact [21:11] ideally at the partitioning stage there'd be an "add a network share" option :) [21:11] buuuuuuuuuut I don't think there is [21:13] In the preseeds you can have for partitioning a "recipe" but not sure it includes non-local disks [22:51] anyone an avid webmin user and could help troubleshoot why im not receiving emails from the System and Server Status module? [22:51] TJ`: Ubuntu doesn't support the use of webmin [22:51] !webmin [22:51] webmin is no longer supported in Debian and Ubuntu. It is not compatible with the way that Ubuntu packages handle configuration files, and is likely to cause unexpected issues with your system. See !ebox instead. [22:53] ive got it running perfectly lol [22:53] ill have a look at ebo though [22:53] whether it works "perfectly" or not [22:53] it's not supported [22:53] try #webmin [22:53] empy [22:53] *empty [22:54] !google ebox [22:54] Sorry, I don't know anything about google ebox [22:54] that doesn't bode well for the software quality [22:54] !ebox [22:54] ebox is a web-based GUI interface for administering a server. It is designed to work with Ubuntu/Debian style configuration management. See https://help.ubuntu.com/community/eBox [22:55] giovani i dont suppose u know a good system to monitor services on the network and email/sms when they go down? [23:07] anyone here use roundcube for a webmail client? [23:14] billybigrigger_ ive used as part of cPanel [23:14] never installed it myself [23:14] its pretty good nice and clean [23:14] hmm [23:14] users like it [23:14] bit slow [23:14] i was just wondering about an auto-login for it [23:15] just found something that looks alot better than squirrel, or roundcube, imo [23:15] atmail [23:15] looks very nice [23:15] gonna play with that one i think, roundcube is just...i dunno, still early beta...and it feels like it too [23:15] lol [23:18] http://www.atmail.org/demo.php. [23:18] take a look, tell me that doesnt look 10x better than squirrelmail or roundcube [23:19] squirrelmail is like notepad [23:19] its just dead simple, stable and nothing with replace it :) [23:20] its v nice though! [23:20] notepad :S, what a comparision [23:20] responsive too [23:20] * TJ` loves notepad [23:21] ok [23:21] what do people here use to monitor their networks and services? [23:21] TJ there are editors more advanced which can help you reduce you editing time, and therefore more productive [23:21] jmedina ofc there are, notepad++ eclipse, dreamweaver [23:21] TJ, just: apt-get install vim && vimtutor [23:21] :D [23:21] nano > vim [23:22] TJ`well I dont use windows, so I dont know [23:22] all hail nano [23:22] people, is nagios really that good? [23:23] vi is the only editor I use, when you manage a comercial unix, the only editor you have is vi [23:23] TJ` it depens on your needs, and the layers you want to monitor [23:23] i want simple monitoring [23:23] when things go down i want an email [23:23] cant find ANYTHING simple [23:23] tj` well what is your definition of "simple monitoring" [23:24] and straightforward [23:24] i suppose check if that service on host:port is reacheable [23:24] TJ` you can use monit, it is really simple [23:24] tj` try centreon, it is based on nagios, really easy to configure [23:24] no need to edit nagios files [23:24] the samba conf files are easier then monit [23:58] i've built several custom .deb packages and would like to enable authentication for them [23:58] if i use debsig-verify all packages from the standard ubuntu repo fail verification... should i be using something besides debsig-verify or do i need to add the ubuntu keys to debsig [23:58] what method do the ubuntu packages use for verification?