Return-Path: X-Original-To: apmail-cxf-users-archive@www.apache.org Delivered-To: apmail-cxf-users-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 678D317F66 for ; Tue, 28 Jul 2015 16:04:03 +0000 (UTC) Received: (qmail 34054 invoked by uid 500); 28 Jul 2015 16:03:28 -0000 Delivered-To: apmail-cxf-users-archive@cxf.apache.org Received: (qmail 33985 invoked by uid 500); 28 Jul 2015 16:03:28 -0000 Mailing-List: contact users-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: users@cxf.apache.org Delivered-To: mailing list users@cxf.apache.org Received: (qmail 33971 invoked by uid 99); 28 Jul 2015 16:03:28 -0000 Received: from Unknown (HELO spamd4-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 28 Jul 2015 16:03:28 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd4-us-west.apache.org (ASF Mail Server at spamd4-us-west.apache.org) with ESMTP id AA1D6C4F9F for ; Tue, 28 Jul 2015 16:03:27 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd4-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 3.901 X-Spam-Level: *** X-Spam-Status: No, score=3.901 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=3, KAM_LIVE=1, SPF_PASS=-0.001, URIBL_BLOCKED=0.001, WEIRD_PORT=0.001] autolearn=disabled Authentication-Results: spamd4-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-us-east.apache.org ([10.40.0.8]) by localhost (spamd4-us-west.apache.org [10.40.0.11]) (amavisd-new, port 10024) with ESMTP id iqodN1angCUC for ; Tue, 28 Jul 2015 16:03:13 +0000 (UTC) Received: from mail-wi0-f177.google.com (mail-wi0-f177.google.com [209.85.212.177]) by mx1-us-east.apache.org (ASF Mail Server at mx1-us-east.apache.org) with ESMTPS id 3E0A143817 for ; Tue, 28 Jul 2015 16:03:13 +0000 (UTC) Received: by wicgb10 with SMTP id gb10so163440678wic.1 for ; Tue, 28 Jul 2015 09:03:12 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=aMdtsoZFvW0CVjDOrvBBZ57TIJCOH/uNb0itCM82hQU=; b=DWDuZLm9ClGYd7IjPwIdN1lOOYeu7CMl3M42FJ7B8KGZ0qChNtDcxfsAmWUEoMebH7 y45itpQ1h9sizW6XPZvK3aPRn5whDTM0DiG3HI0Y98wVCLiKneMnS2Uu1r/iJVM6yMkN 0sW4Pev8S8wOjYauFGAk/ypuwLFI3/lB0OT9GCx9XyZCwiUziLBBLWulL/TYK6ICHfmp eW1Zhc8PwHRG5LnKjH+j9bAJv3SWFbHQfxjeUokypQPS6KIPpAbAjkKMl4LSlgSAgjdE avN1GeNWgtmW3XWKorA+KYP0DN6+uJDsA/uyiVocYQJMQRz7fY2iM5aCv4cDMh5dS4Tk eIWA== MIME-Version: 1.0 X-Received: by 10.194.179.136 with SMTP id dg8mr64405685wjc.49.1438099392174; Tue, 28 Jul 2015 09:03:12 -0700 (PDT) Received: by 10.28.175.75 with HTTP; Tue, 28 Jul 2015 09:03:11 -0700 (PDT) In-Reply-To: References: Date: Tue, 28 Jul 2015 18:03:11 +0200 Message-ID: Subject: Re: Fediz SimpleWeb demo problem From: =?UTF-8?Q?Dariusz_Ma=C5=82yszko?= To: users@cxf.apache.org Content-Type: multipart/mixed; boundary=089e01493ae46d3da1051bf19b23 --089e01493ae46d3da1051bf19b23 Content-Type: multipart/alternative; boundary=089e01493ae46d3d9c051bf19b21 --089e01493ae46d3d9c051bf19b21 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable after POSTing into https://localhost:9443/fediz-idp/services/rs/application= s in order to register fedizhelloworld2, I got the following result as in enclosed screenshot - unauthorized access. Best regards, Dariusz Ma=C5=82yszko 2015-07-28 15:02 GMT+02:00 Jan Bernhardt : > Hi Dariusz, > > this is very strange, but I will also check that with binaries from githu= b. > > Since it is possible to change the configuration of the IDP via the REST > API authentication is required. > > If you use the demo IDP setup just add basic authentication (bob:bob) to > your SoapUI requests. Then you should be able to register a second > application as described in my blog. > > Kind regards > Jan > > -- > Jan Bernhardt > > Talend Community Coder > http://coders.talend.com > > Visit my Blog > https://janbernhardt.blogspot.de > > -----Urspr=C3=BCngliche Nachricht----- > > Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com] > > Gesendet: Dienstag, 28. Juli 2015 14:20 > > An: users@cxf.apache.org > > Betreff: Re: Fediz SimpleWeb demo problem > > > > I do not know why, but I additionally tested Fediz simpleweb applicatio= n > on > > Thar 14.10 Ubuntu, with binaries from fediz.apache, not from gihub.com > > version, and everything works fine. On Windows 8.1, after compiling > version > > from github, with many restarts of mvn, skipping testing and doc > creation, > > application does not worked. Maybe these two version are not the same, > > (on github is developer version?). > > > > So, everything from single sign on / off works fine on Ubuntu with step > by > > step instructions from > > > > http://janbernhardt.blogspot.com/2015/01/single-logout-with-fediz-ws- > > > > On issue is only the problem that POSTing from SoapUI domain registerin= g > > throws Authorization errors. > > > > > > > > > > 2015-07-28 9:04 GMT+02:00 Jan Bernhardt : > > > > > Hi Dariusz, > > > > > > I was able to setup the hello world demo (Version 1.2.0) yesterday > > > without any issues. > > > Since I cannot reproduce your error I do not know how I could help yo= u. > > > > > > Kind regards > > > Jan > > > > > > -- > > > Jan Bernhardt > > > > > > Talend Community Coder > > > http://coders.talend.com > > > > > > Visit my Blog > > > https://janbernhardt.blogspot.de > > > > -----Urspr=C3=BCngliche Nachricht----- > > > > Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com] > > > > Gesendet: Mittwoch, 22. Juli 2015 18:04 > > > > An: users@cxf.apache.org > > > > Betreff: Re: Fediz SimpleWeb demo problem > > > > > > > > it is the version Apache CXF Fediz 1.2.0 taken from > > > > https://github.com/apache/cxf-fediz, compiled, then jars from > > > > services, > > > > plugins/tomcat7 and examples/simpleweb are taken and applied to > > > > three Tomcat instances as given in the blog > > > > > > > > http://janbernhardt.blogspot.com/2015/01/single-logout-with-fediz-w= s > > > > - > > > > > > > > > > > > Best regards, > > > > > > > > 2015-07-22 17:51 GMT+02:00 Jan Bernhardt : > > > > > > > > > Which version are you using for your tests? > > > > > > > > > > Kind regards > > > > > Jan > > > > > > > > > > -- > > > > > Jan Bernhardt > > > > > > > > > > Talend Community Coder > > > > > http://coders.talend.com > > > > > > > > > > Visit my Blog > > > > > https://janbernhardt.blogspot.de > > > > > > > > > > > -----Urspr=C3=BCngliche Nachricht----- > > > > > > Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com] > > > > > > Gesendet: Mittwoch, 22. Juli 2015 17:27 > > > > > > An: users@cxf.apache.org > > > > > > Betreff: Fediz SimpleWeb demo problem > > > > > > > > > > > > Hello, > > > > > > > > > > > > I have the following problem with Fediz installation. I am > > > > > > trying to > > > > > start > > > > > > SimpleWeb application from examples given in distribution code. > > > > > > I follow instruction given in > > > > > > > > > > > > http://janbernhardt.blogspot.com/2015/01/single-logout-with-fed= i > > > > > > z-ws > > > > > > - > > > > > > federation.html > > > > > > > > > > > > > > > > > > it means I have created > > > > > > > > > > > > - Fediz-idp, Fediz-idp-sts on one instance of Tomcat 7.0.36 > > > > > > - SimpleWeb 1 application on second Tomcat instance > > > > > > - SimpleWeb2 application on the third Tomcat instance > > > > > > > > > > > > The following commands are correct > > > > > > > > > > > > https://localhost:8443/fedizhelloworld/FederationMetadata/2007- > > > > > > 06/FederationMetadata.xml > > > > > > > > > > > > > > > > > > GET https://localhost:9443/fediz-idp/services/rs/idps > > > > > > > > > > > > But when issuing command > > > > > > > > > > > > https://localhost:8443/fedizhelloworld/secure/fedservlet > > > > > > > > > > > > redirection to https://localhost:9443/fediz-idp/federation.....= . > > > > > > > > > > > > gives the following error > > > > > > > > > > > > > > > > > > *ype* Exception report > > > > > > > > > > > > *message* *Request processing failed; nested exception is > > > > > > org.springframework.webflow.execution.FlowExecutionException: > > > > > > Exception thrown in state 'showIDPList' of flow 'signinRequest'= * > > > > > > > > > > > > *description* *The server encountered an internal error that > > > > > > prevented it from fulfilling this request.* > > > > > > > > > > > > *exception* > > > > > > > > > > > > org.springframework.web.util.NestedServletException: Request > > > > > > processing failed; nested exception is > > > > > > org.springframework.webflow.execution.FlowExecutionException: > > > > > > Exception thrown in state 'showIDPList' of flow 'signinRequest' > > > > > > > > > > > > org.springframework.web.servlet.FrameworkServlet.processReques > > > > > > t(FrameworkServlet.java:978) > > > > > > > > > > > > org.springframework.web.servlet.FrameworkServlet.doGet(Framew > > > > > > orkServlet.java:857) > > > > > > > javax.servlet.http.HttpServlet.service(HttpServlet.java:624) > > > > > > > > > > > > org.springframework.web.servlet.FrameworkServlet.service(Frame > > > > > > workServlet.java:842) > > > > > > > > > > > > javax.servlet.http.HttpServlet.service(HttpServlet.java:731) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:330) > > > > > > > > > > > > > > > > org.apache.cxf.fediz.service.idp.service.security.GrantedAuthorit= y > > > > > En > > > > > > titlements.doFilter(GrantedAuthorityEntitlements.java:99) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:342) > > > > > > > > > > > > org.springframework.security.web.servletapi.SecurityContextHold= e > > > > > > r > > > > > > > > AwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter. > > > > > > java > > > > > > :54) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:342) > > > > > > > > > > > > org.springframework.security.web.savedrequest.RequestCacheAwa > > > > > > reFilter.doFilter(RequestCacheAwareFilter.java:45) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:342) > > > > > > > > > > > > org.springframework.security.web.context.SecurityContextPersist= e > > > > > > n > > > > > > ceFilter.doFilter(SecurityContextPersistenceFilter.java:87) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:342) > > > > > > > > > > > > > > > > > org.apache.cxf.fediz.service.idp.STSPortFilter.doFilter(STSPortFilter. > > > > > j > > > > > > ava:74) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy$VirtualFilter= C > > > > > > hai > > > > > > n.doFilter(FilterChainProxy.java:342) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy.doFilterInter= n > > > > > > al( > > > > > > FilterChainProxy.java:192) > > > > > > > > > > > > org.springframework.security.web.FilterChainProxy.doFilter(Filt= e > > > > > > rCh > > > > > > ainProxy.java:160) > > > > > > > > > > > > org.springframework.web.filter.DelegatingFilterProxy.invokeDele= g > > > > > > at > > > > > > e(DelegatingFilterProxy.java:344) > > > > > > > > > > > > org.springframework.web.filter.DelegatingFilterProxy.doFilter(D= e > > > > > > leg > > > > > > atingFilterProxy.java:261) > > > > > > > > > > > > > > > > org.springframework.web.filter.CharacterEncodingFilter.doFilterIn= t > > > > > er > > > > > > nal(CharacterEncodingFilter.java:85) > > > > > > > > > > > > org.springframework.web.filter.OncePerRequestFilter.doFilter(On= c > > > > > > e > > > > > > PerRequestFilter.java:107) > > > > > > > > > > > > ....... > > > > > > > > > > > > > > > > > > How to correct this problem? > > > > > > > > > > > > > > > > > > > > > > > > Best regards > > > > > > > > > --089e01493ae46d3d9c051bf19b21 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable


after POSTing into=C2=A0https://localho= st:9443/fediz-idp/services/rs/applications in order to register fedizhe= lloworld2, I got the following result as in enclosed screenshot - unauthori= zed access.


Best regards,
Dariusz Ma=C5=82yszko

2015-07-28 15:02 GMT+02:00 Jan Bernhardt <jbernhardt@= talend.com>:
Hi Dariusz,
this is very strange, but I will also check that with binaries from github.=

Since it is possible to change the configuration of the IDP via the REST AP= I authentication is required.

If you use the demo IDP setup just add basic authentication (bob:bob) to yo= ur SoapUI requests. Then you should be able to register a second applicatio= n as described in my blog.

Kind regards
Jan

--
Jan Bernhardt

Talend Community Coder
h= ttp://coders.talend.com

Visit my Blog
https://janbernhardt.blogspot.de
> -----Urspr=C3=BCngliche Nachricht-----
> Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com]
> Gesendet: Dienstag, 28. Juli 2015 14:20
> An: users@cxf.apache.org > Betreff: Re: Fediz SimpleWeb demo problem
>
> I do not know why, but I additionally tested Fediz simpleweb applicati= on on
> Thar 14.10 Ubuntu, with binaries from fediz.apache, not from gihub.com > version, and everything works fine. On Windows 8.1, after compiling ve= rsion
> from github, with many restarts of mvn, skipping testing and doc creat= ion,
> application does not worked. Maybe these two version are not the same,=
> (on github is developer version?).
>
> So, everything from single sign on / off works fine on Ubuntu with ste= p by
> step instructions from
>
> http://janbernhardt.blogsp= ot.com/2015/01/single-logout-with-fediz-ws-
>
> On issue is only the problem that POSTing from SoapUI domain registeri= ng
> throws Authorization errors.
>
>
>
>
> 2015-07-28 9:04 GMT+02:00 Jan Bernhardt <jbernhardt@talend.com>:
>
> > Hi Dariusz,
> >
> > I was able to setup the hello world demo (Version 1.2.0) yesterda= y
> > without any issues.
> > Since I cannot reproduce your error I do not know how I could hel= p you.
> >
> > Kind regards
> > Jan
> >
> > --
> > Jan Bernhardt
> >
> > Talend Community Coder
> > http://coders.talend.com
> >
> > Visit my Blog
> > https://janbernhardt.blogspot.de
> > > -----Urspr=C3=BCngliche Nachricht-----
> > > Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com]
> > > Gesendet: Mittwoch, 22. Juli 2015 18:04
> > > An: users@cxf.apache= .org
> > > Betreff: Re: Fediz SimpleWeb demo problem
> > >
> > > it is the version=C2=A0 Apache CXF Fediz 1.2.0 taken from > > > https://github.com/apache/cxf-fediz, compiled,= then jars from
> > > services,
> > > plugins/tomcat7 and examples/simpleweb are taken and applied= to
> > > three Tomcat instances as given in the blog
> > >
> > > http://janbernhar= dt.blogspot.com/2015/01/single-logout-with-fediz-ws
> > > -
> > >
> > >
> > > Best regards,
> > >
> > > 2015-07-22 17:51 GMT+02:00 Jan Bernhardt <jbernhardt@talend.com>:
> > >
> > > > Which version are you using for your tests?
> > > >
> > > > Kind regards
> > > > Jan
> > > >
> > > > --
> > > > Jan Bernhardt
> > > >
> > > > Talend Community Coder
> > > > http://coders.talend.com
> > > >
> > > > Visit my Blog
> > > > https://janbernhardt.blogspot.de
> > > >
> > > > > -----Urspr=C3=BCngliche Nachricht-----
> > > > > Von: Dariusz Ma=C5=82yszko [mailto:jan.kowalski.inf@gmail.com]
> > > > > Gesendet: Mittwoch, 22. Juli 2015 17:27
> > > > > An: users@= cxf.apache.org
> > > > > Betreff: Fediz SimpleWeb demo problem
> > > > >
> > > > > Hello,
> > > > >
> > > > > I have the following problem with Fediz installati= on. I am
> > > > > trying to
> > > > start
> > > > > SimpleWeb application from examples given in distr= ibution code.
> > > > > I follow instruction given in
> > > > >
> > > > > http://janb= ernhardt.blogspot.com/2015/01/single-logout-with-fedi
> > > > > z-ws
> > > > > -
> > > > > federation.html
> > > > >
> > > > >
> > > > > it means I have created
> > > > >
> > > > > - Fediz-idp, Fediz-idp-sts on one instance of Tomc= at 7.0.36
> > > > > - SimpleWeb 1 application on second Tomcat instanc= e
> > > > > - SimpleWeb2 application on the third Tomcat insta= nce
> > > > >
> > > > > The following commands are correct
> > > > >
> > > > > https://loca= lhost:8443/fedizhelloworld/FederationMetadata/2007-
> > > > > 06/FederationMetadata.xml
> > > > >
> > > > >
> > > > > GET https://localhost:9443= /fediz-idp/services/rs/idps
> > > > >
> > > > > But when issuing command
> > > > >
> > > > > https://localhost:8= 443/fedizhelloworld/secure/fedservlet
> > > > >
> > > > > redirection to https://local= host:9443/fediz-idp/federation......
> > > > >
> > > > > gives the following error
> > > > >
> > > > >
> > > > > *ype* Exception report
> > > > >
> > > > > *message* *Request processing failed; nested excep= tion is
> > > > > org.springframework.webflow.execution.FlowExecutio= nException:
> > > > > Exception thrown in state 'showIDPList' of= flow 'signinRequest'*
> > > > >
> > > > > *description* *The server encountered an internal = error that
> > > > > prevented it from fulfilling this request.*
> > > > >
> > > > > *exception*
> > > > >
> > > > > org.springframework.web.util.NestedServletExceptio= n: Request
> > > > > processing failed; nested exception is
> > > > > org.springframework.webflow.execution.FlowExecutio= nException:
> > > > > Exception thrown in state 'showIDPList' of= flow 'signinRequest'
> > > > >
> > > > > org.springframework.web.servlet.FrameworkServlet.p= rocessReques
> > > > > t(FrameworkServlet.java:978)
> > > > >
> > > > > org.springframework.web.servlet.FrameworkServlet.d= oGet(Framew
> > > > > orkServlet.java:857)
> > > > >=C2=A0 =C2=A0 =C2=A0 =C2=A0javax.servlet.http.HttpS= ervlet.service(HttpServlet.java:624)
> > > > >
> > > > > org.springframework.web.servlet.FrameworkServlet.s= ervice(Frame
> > > > > workServlet.java:842)
> > > > >
> > > > > javax.servlet.http.HttpServlet.service(HttpServlet= .java:731)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:330)
> > > > >
> > > >
> > > > org.apache.cxf.fediz.service.idp.service.security.Grant= edAuthority
> > > > En
> > > > > titlements.doFilter(GrantedAuthorityEntitlements.j= ava:99)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:342)
> > > > >
> > > > > org.springframework.security.web.servletapi.Securi= tyContextHolde
> > > > > r
> > > > >
> AwareRequestFilter.doFilter(SecurityContextHolderAwareRequestFilter. > > > > > java
> > > > > :54)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:342)
> > > > >
> > > > > org.springframework.security.web.savedrequest.Requ= estCacheAwa
> > > > > reFilter.doFilter(RequestCacheAwareFilter.java:45)=
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:342)
> > > > >
> > > > > org.springframework.security.web.context.SecurityC= ontextPersiste
> > > > > n
> > > > > ceFilter.doFilter(SecurityContextPersistenceFilter= .java:87)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:342)
> > > > >
> > > >
> > > > org.apache.cxf.fediz.service.idp.STSPortFilter.doFilter= (STSPortFilter.
> > > > j
> > > > > ava:74)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy$= VirtualFilterC
> > > > > hai
> > > > > n.doFilter(FilterChainProxy.java:342)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy.= doFilterIntern
> > > > > al(
> > > > > FilterChainProxy.java:192)
> > > > >
> > > > > org.springframework.security.web.FilterChainProxy.= doFilter(Filte
> > > > > rCh
> > > > > ainProxy.java:160)
> > > > >
> > > > > org.springframework.web.filter.DelegatingFilterPro= xy.invokeDeleg
> > > > > at
> > > > > e(DelegatingFilterProxy.java:344)
> > > > >
> > > > > org.springframework.web.filter.DelegatingFilterPro= xy.doFilter(De
> > > > > leg
> > > > > atingFilterProxy.java:261)
> > > > >
> > > >
> > > > org.springframework.web.filter.CharacterEncodingFilter.= doFilterInt
> > > > er
> > > > > nal(CharacterEncodingFilter.java:85)
> > > > >
> > > > > org.springframework.web.filter.OncePerRequestFilte= r.doFilter(Onc
> > > > > e
> > > > > PerRequestFilter.java:107)
> > > > >
> > > > > .......
> > > > >
> > > > >
> > > > > How to correct this problem?
> > > > >
> > > > >
> > > > >
> > > > > Best regards
> > > >
> >

--089e01493ae46d3d9c051bf19b21-- --089e01493ae46d3da1051bf19b23--