@processor Don’t feel ashamed. Mistakes happen and that’s what we are all here for.

The example I was asking for was the output, but then it all clicked. You were doing a Get request 🙂

@Tom-Elliott

Thanks Tom.

I since went with 1.5.9 and was able to re-install the server with that, I did have to run the installer a few times to load all the missing packages.

I ended up putting the kernel, init files there manually. Then with the installer running and adding the --ignore fail switch installed the files that way.

Then I updated to the latest kernel in the FOG GUI so I have the latest kernel running as I need this for current HP Z2 G9 mini and small form factor computers.

This is running so I considered this solved.

Matt

I noticed that on the old database if you registered the client and went to the hosts section and then service settings.  You would see all the boxes unchecked.  If you tried to check them and hit update it would appear to work.  But if you went out and back into the client all the boxes were still unchecked.

If anyone runs into this, I wanted to post what I did for this issue.  I performed a clean install of fog on a new server.  I then restored the images and the database.  After that, I still had the same problem.  I put a blank database on the server and tried registering the computer again and it worked.  So, we worked around the problem by starting with a clean database.  Luckily, we are replacing over half of our computers this summer, so we don’t have that many to register again.

Bumping this topic. I too see the issue. I only see imaging events for registered hosts. I have a lot of field techs imaging unregistered hosts and need to have these events logged.

@TaTa

Thank you for your reply. I didn’t try your solution but after IGMP Snooping was configured on the VLAN, the multicasting worked immediately.

I left all the Fog multicasting settings as default.

@Kureebow Kernel Update resolved the issue. Thank you JJ Fullmer for the assistance!

@1337darkin The image can be captured in any state (PXE/UEFI)

But to boot the system, you need it in the “original” state of creating in the image:

For example::

You have a UEFI booted machine, and you capture the Image over PXE (Legacy) network via Virtual Box

That will be fine, as long as the system that boots is booting in UEFI mode. The “boot” mode is the important piece if that helps?

@rodluz That got it!

You are the man!

Let me give a feedback to this issue, as I faced it recently. In my case, the culprit was faulting parameters in Microsoft DHCP.
Captura de tela de 2024-05-03 12-15-42.png
It was faulting “MSFT Quarantine” User Class and PXE Vendor Class is not properly configured (It was typed “PXEclient:Arch:00007” instead of “PXEClient:Arch:00007”).
Captura de tela de 2024-05-03 12-15-26.png
After doing this corrections, PXE got successfully redirected Boot instructions to FOG Server.

@Tom-Elliott said in Ftp_login(): Maximum number of tried exceeded:

@nkduy1508 You need to resync your FOG FTP credentials and all.

https://forums.fogproject.org/topic/11203/resyncing-fog-s-service-account-password

fog shouldn’t be the user in use anymore unless you’re using a very old version of FOG?

From the INIT version, it seems maybe from 1.5.7?

Version Fog: 1.5.9 RC2
I checked password TFTP server the same with jogsetting file

@Tom-Elliott

Hi Tom,

While I was installing the Log tool as dependencies and started the capture process, it worked.

I tested it on 2 different workstations, both of which worked.

I have no idea why, but I’m happy.

As soon as I do this on more machines, I will return to congratulate you for your support and request closure.

Thank you very much.

@Greg-Plamondon @iljared98 Thank you for the input. We haven’t seen the issue reoccur after deploying a fresh image to these computers. If it crops back up, I will try your suggestions.

Time passes, but the problem is not solved. This problem happened because DHCP server not provide gateway to UEFI PXE client or UEFI ignore this… I just added to my each host
host pc131 {
option subnet-mask 255.255.255.0;
option routers 172.20.0.1;
option host-name “pc131”;
hardware ethernet 0a:e0:af:a2:02:bb;
fixed-address 172.20.0.131;
}

And it download ipxe.efi without problem! My DHCP - ISC-DHCP-SERVER - I manage it via Webmin )
I don’t know why it not working properly when it setup in “subnet” section these options “subnet-mask and routers” setted too, but ignored UEFI PXE
subnet 172.20.0.0 netmask 255.255.255.0 {
option broadcast-address 172.20.0.255;
authoritative;
next-server 172.16.0.1;
ignore unknown-clients;
boot-unknown-clients off;
max-lease-time 7200;
default-lease-time 1800;
option domain-name-servers 1.1.1.1 , 8.8.8.8;
option domain-name “pclab-customer.loc”;
option subnet-mask 255.255.255.0;
option routers 172.20.0.1;

You can try check it with your dhcp DNSMASQ or another.

I tried to change my apache conf from :

<VirtualHost *:80> <FilesMatch "\.php$"> SetHandler "proxy:fcgi://127.0.0.1:9000/" </FilesMatch> KeepAlive Off ServerName 192.168.1.200 ServerAlias fog-pi.ad.atdqm.tech DocumentRoot /var/www/ RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] RewriteRule /management/other/ca.cert.der$ - [L] RewriteCond %{HTTPS} off RewriteRule (.*) https://%{HTTP_HOST}/$1 [R,L] </VirtualHost> <VirtualHost *:443> KeepAlive Off <FilesMatch "\.php$"> SetHandler "proxy:fcgi://127.0.0.1:9000/" </FilesMatch> ServerName 192.168.1.200 ServerAlias fog-pi.ad.atdqm.tech DocumentRoot /var/www/ SSLEngine On SSLProtocol all -SSLv3 -SSLv2 SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL # SSLCipherSuite ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA SSLHonorCipherOrder On SSLCertificateFile /var/www/fog//management/other/ssl/srvpublic.crt SSLCertificateKeyFile /opt/fog/snapins/ssl//.srvprivate.key SSLCACertificateFile /var/www/fog//management/other/ca.cert.pem <Directory /var/www/fog/> DirectoryIndex index.php index.html index.htm </Directory> RewriteEngine On RewriteCond %{REQUEST_METHOD} ^(TRACE|TRACK) RewriteRule .* - [F] RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-f RewriteCond %{DOCUMENT_ROOT}/%{REQUEST_FILENAME} !-d RewriteRule ^/fog/(.*)$ /fog/api/index.php [QSA,L] </VirtualHost>

by allowing all cipher/algo with this

SSLCipherSuite ALL:!aNULL:RC4+RSA:+HIGH:+MEDIUM:+LOW:+EXP:+eNULL

didn’t work.

@tedlaur

Some additional info …

root@fog:~# cat /root/fogproject-dev-branch/bin/error_logs/fog_error_1.5.10.18.log
/usr/bin/lsb_release
/usr/bin/systemctl
systemd
ln: failed to create symbolic link ‘/lib/systemd/system/mysql.service’: File exists
ln: failed to create symbolic link ‘/lib/systemd/system/mysqld.service’: File exists
ln: failed to create symbolic link ‘/etc/systemd/system/mysql.service’: File exists
ln: failed to create symbolic link ‘/etc/systemd/system/mysqld.service’: File exists
/usr/sbin/sestatus
dpkg-query: no packages found matching mysql-server
Reading package lists…
Building dependency tree…
Reading state information…
curl is already the newest version (7.88.1-10+deb12u5).
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
Testing DNS name resolution (neverssl.com)… OK
Testing HTTP connection (http://neverssl.com)… OK
Testing HTTPS connection (https://github.com)… OK
Hit:1 http://security.debian.org/debian-security bookworm-security InRelease
Get:2 http://deb.debian.org/debian bookworm InRelease [151 kB]
Hit:3 http://deb.debian.org/debian bookworm-updates InRelease
Fetched 151 kB in 1s (157 kB/s)
Reading package lists…
ii apache2 2.4.59-1~deb12u1 amd64 Apache HTTP Server
ii bc 1.07.1-3+b1 amd64 GNU bc arbitrary precision calculator language
ii build-essential 12.9 amd64 Informational list of build-essential packages
ii cpp 4:12.2.0-3 amd64 GNU C preprocessor (cpp)
ii curl 7.88.1-10+deb12u5 amd64 command line tool for transferring data with URL syntax
ii g++ 4:12.2.0-3 amd64 GNU C++ compiler
ii gawk 1:5.2.1-2 amd64 GNU awk, a pattern scanning and processing language
ii gcc 4:12.2.0-3 amd64 GNU C compiler
ii genisoimage 9:1.1.11-3.4 amd64 Creates ISO-9660 CD-ROM filesystem images
ii git 1:2.39.2-1.1 amd64 fast, scalable, distributed revision control system
ii gzip 1.12-1 amd64 GNU compression utilities
ii htmldoc 1.9.16-1 amd64 HTML processor that generates indexed HTML, PS, and PDF
ii isolinux 3:6.04~git20190206.bf6db5b4+dfsg1-3 all collection of bootloaders (ISO 9660 bootloader)
ii lftp 4.9.2-2+b1 amd64 Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii libapache2-mod-php 2:8.2+93 all server-side, HTML-embedded scripting language (Apache 2 module) (default)
ii libc6:amd64 2.36-9+deb12u4 amd64 GNU C Library: Shared libraries
ii libcurl4:amd64 7.88.1-10+deb12u5 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
ii liblzma-dev:amd64 5.4.1-0.2 amd64 XZ-format compression library - development files
ii m4 1.4.19-3 amd64 macro processing language
mariadb-client-core
mariadb-client
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
mariadb-server
mariadb-server-core
mariadb-server-10.5
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii net-tools 2.10-0.1 amd64 NET-3 networking toolkit
ii nfs-kernel-server 1:2.6.2-4 amd64 support for NFS kernel server
ii openssh-server 1:9.2p1-2+deb12u2 amd64 secure shell (SSH) server, for secure access from remote machines
ii php 2:8.2+93 all server-side, HTML-embedded scripting language (default)
ii php-bcmath 2:8.2+93 all Bcmath module for PHP [default]
ii php-cli 2:8.2+93 all command-line interpreter for the PHP scripting language (default)
ii php-curl 2:8.2+93 all CURL module for PHP [default]
ii php-fpm 2:8.2+93 all server-side, HTML-embedded scripting language (FPM-CGI binary) (default)
ii php-gd 2:8.2+93 all GD module for PHP [default]
php-json-schema
php-json
ii php-json 2:8.2+93 all JSON module for PHP [default]
ii php-ldap 2:8.2+93 all LDAP module for PHP [default]
ii php-mbstring 2:8.2+93 all MBSTRING module for PHP [default]
php-mysql
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
php-mysql
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
ii tar 1.34+dfsg-1.2+deb12u1 amd64 GNU version of the tar archiving utility
ii tftpd-hpa 5.2+20150808-1.4 amd64 HPA’s tftp server
ii tftp-hpa 5.2+20150808-1.4 amd64 HPA’s tftp client
ii unzip 6.0-28 amd64 De-archiver for .zip files
ii vsftpd 3.0.3-13+b2 amd64 lightweight, efficient FTP server written for security
ii wget 1.21.3-1+b2 amd64 retrieves files from the web
ii zlib1g:amd64 1:1.2.13.dfsg-1 amd64 compression library - runtime
Reading package lists…
Building dependency tree…
Reading state information…
apache2 is already the newest version (2.4.59-1~deb12u1).
bc is already the newest version (1.07.1-3+b1).
build-essential is already the newest version (12.9).
cpp is already the newest version (4:12.2.0-3).
curl is already the newest version (7.88.1-10+deb12u5).
g++ is already the newest version (4:12.2.0-3).
gawk is already the newest version (1:5.2.1-2).
gcc is already the newest version (4:12.2.0-3).
genisoimage is already the newest version (9:1.1.11-3.4).
git is already the newest version (1:2.39.2-1.1).
gzip is already the newest version (1.12-1).
htmldoc is already the newest version (1.9.16-1).
isolinux is already the newest version (3:6.04~git20190206.bf6db5b4+dfsg1-3).
lftp is already the newest version (4.9.2-2+b1).
libapache2-mod-php is already the newest version (2:8.2+93).
libc6 is already the newest version (2.36-9+deb12u4).
libcurl4 is already the newest version (7.88.1-10+deb12u5).
liblzma-dev is already the newest version (5.4.1-0.2).
m4 is already the newest version (1.4.19-3).
mariadb-client is already the newest version (1:10.11.6-0+deb12u1).
mariadb-server is already the newest version (1:10.11.6-0+deb12u1).
net-tools is already the newest version (2.10-0.1).
nfs-kernel-server is already the newest version (1:2.6.2-4).
openssh-server is already the newest version (1:9.2p1-2+deb12u2).
php is already the newest version (2:8.2+93).
php-bcmath is already the newest version (2:8.2+93).
php-cli is already the newest version (2:8.2+93).
php-curl is already the newest version (2:8.2+93).
php-fpm is already the newest version (2:8.2+93).
php-gd is already the newest version (2:8.2+93).
php-json is already the newest version (2:8.2+93).
php-ldap is already the newest version (2:8.2+93).
php-mbstring is already the newest version (2:8.2+93).
php-mysql is already the newest version (2:8.2+93).
tar is already the newest version (1.34+dfsg-1.2+deb12u1).
tftpd-hpa is already the newest version (5.2+20150808-1.4).
tftp-hpa is already the newest version (5.2+20150808-1.4).
unzip is already the newest version (6.0-28).
vsftpd is already the newest version (3.0.3-13+b2).
wget is already the newest version (1.21.3-1+b2).
zlib1g is already the newest version (1:1.2.13.dfsg-1).
Calculating upgrade…
The following packages have been kept back:
linux-headers-amd64 linux-image-amd64
0 upgraded, 0 newly installed, 0 to remove and 2 not upgraded.
ii apache2 2.4.59-1~deb12u1 amd64 Apache HTTP Server
ii bc 1.07.1-3+b1 amd64 GNU bc arbitrary precision calculator language
ii build-essential 12.9 amd64 Informational list of build-essential packages
ii cpp 4:12.2.0-3 amd64 GNU C preprocessor (cpp)
ii curl 7.88.1-10+deb12u5 amd64 command line tool for transferring data with URL syntax
ii g++ 4:12.2.0-3 amd64 GNU C++ compiler
ii gawk 1:5.2.1-2 amd64 GNU awk, a pattern scanning and processing language
ii gcc 4:12.2.0-3 amd64 GNU C compiler
ii genisoimage 9:1.1.11-3.4 amd64 Creates ISO-9660 CD-ROM filesystem images
ii git 1:2.39.2-1.1 amd64 fast, scalable, distributed revision control system
ii gzip 1.12-1 amd64 GNU compression utilities
ii htmldoc 1.9.16-1 amd64 HTML processor that generates indexed HTML, PS, and PDF
ii isolinux 3:6.04~git20190206.bf6db5b4+dfsg1-3 all collection of bootloaders (ISO 9660 bootloader)
ii lftp 4.9.2-2+b1 amd64 Sophisticated command-line FTP/HTTP/BitTorrent client programs
ii libapache2-mod-php 2:8.2+93 all server-side, HTML-embedded scripting language (Apache 2 module) (default)
ii libc6:amd64 2.36-9+deb12u4 amd64 GNU C Library: Shared libraries
ii libcurl4:amd64 7.88.1-10+deb12u5 amd64 easy-to-use client-side URL transfer library (OpenSSL flavour)
ii liblzma-dev:amd64 5.4.1-0.2 amd64 XZ-format compression library - development files
ii m4 1.4.19-3 amd64 macro processing language
ii mariadb-client 1:10.11.6-0+deb12u1 amd64 MariaDB database client binaries
ii mariadb-server 1:10.11.6-0+deb12u1 amd64 MariaDB database server binaries
ii net-tools 2.10-0.1 amd64 NET-3 networking toolkit
ii nfs-kernel-server 1:2.6.2-4 amd64 support for NFS kernel server
ii openssh-server 1:9.2p1-2+deb12u2 amd64 secure shell (SSH) server, for secure access from remote machines
ii php 2:8.2+93 all server-side, HTML-embedded scripting language (default)
ii php-bcmath 2:8.2+93 all Bcmath module for PHP [default]
ii php-cli 2:8.2+93 all command-line interpreter for the PHP scripting language (default)
ii php-curl 2:8.2+93 all CURL module for PHP [default]
ii php-fpm 2:8.2+93 all server-side, HTML-embedded scripting language (FPM-CGI binary) (default)
ii php-gd 2:8.2+93 all GD module for PHP [default]
ii php-json 2:8.2+93 all JSON module for PHP [default]
ii php-ldap 2:8.2+93 all LDAP module for PHP [default]
ii php-mbstring 2:8.2+93 all MBSTRING module for PHP [default]
ii php-mysql 2:8.2+93 all MySQL module for PHP [default]
ii tar 1.34+dfsg-1.2+deb12u1 amd64 GNU version of the tar archiving utility
ii tftpd-hpa 5.2+20150808-1.4 amd64 HPA’s tftp server
ii tftp-hpa 5.2+20150808-1.4 amd64 HPA’s tftp client
ii unzip 6.0-28 amd64 De-archiver for .zip files
ii vsftpd 3.0.3-13+b2 amd64 lightweight, efficient FTP server written for security
ii wget 1.21.3-1+b2 amd64 retrieves files from the web
ii zlib1g:amd64 1:1.2.13.dfsg-1 amd64 compression library - runtime
New password: Retype new password: passwd: password updated successfully
init.xz: OK
init_32.xz: OK
bzImage: OK
bzImage32: OK
FOGService.msi: OK
SmartInstaller.exe: OK
‘bzImage’ -> ‘/var/www/html/fog//service/ipxe/bzImage’
‘bzImage32’ -> ‘/var/www/html/fog//service/ipxe/bzImage32’
‘init.xz’ -> ‘/var/www/html/fog//service/ipxe/init.xz’
‘init_32.xz’ -> ‘/var/www/html/fog//service/ipxe/init_32.xz’
‘FOGService.msi’ -> ‘/var/www/html/fog//client/FOGService.msi’
‘SmartInstaller.exe’ -> ‘/var/www/html/fog//client/SmartInstaller.exe’
mysqlnd
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank. Country Name (2 letter code) [AU]:State or Province Name (full name) [Some-State]:Locality Name (eg, city) []:Organization Name (eg, company) [Internet Widgits Pty Ltd]:Organizational Unit Name (eg, section) []:Common Name (e.g. server FQDN or YOUR name) []:Email Address []:You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter ‘.’, the field will be left blank.

192.168.3.200 []:Certificate request self-signature ok
subject=CN = 192.168.3.200
Site 001-fog disabled.
To activate the new configuration, you need to run:
systemctl reload apache2
Enabling site 000-default.
To activate the new configuration, you need to run:
systemctl reload apache2
renamed ‘/etc/apache2/sites-available/001-fog.conf’ -> ‘/etc/apache2/sites-available/001-fog.conf.1713680529’
ln: failed to create symbolic link ‘/var/www/html/fog/fog’: File exists
ERROR: Module php does not exist!
Considering dependency proxy for proxy_fcgi:
Module proxy already enabled
Module proxy_fcgi already enabled
Module setenvif already enabled
Module rewrite already enabled
Considering dependency setenvif for ssl:
Module setenvif already enabled
Considering dependency mime for ssl:
Module mime already enabled
Considering dependency socache_shmcb for ssl:
Module socache_shmcb already enabled
Module ssl already enabled
Enabling site 001-fog.
To activate the new configuration, you need to run:
systemctl reload apache2
Site 000-default disabled.
To activate the new configuration, you need to run:
systemctl reload apache2
● apache2.service - The Apache HTTP Server
Loaded: loaded (/lib/systemd/system/apache2.service; enabled; preset: enabled)
Active: active (running) since Sat 2024-04-20 23:22:55 PDT; 106ms ago
Docs: https://httpd.apache.org/docs/2.4/
Process: 9422 ExecStart=/usr/sbin/apachectl start (code=exited, status=0/SUCCESS)
Main PID: 9427 (apache2)
Tasks: 6 (limit: 4588)
Memory: 15.5M
CPU: 170ms
CGroup: /system.slice/apache2.service
├─9427 /usr/sbin/apache2 -k start
├─9434 /usr/sbin/apache2 -k start
├─9435 /usr/sbin/apache2 -k start
├─9436 /usr/sbin/apache2 -k start
├─9437 /usr/sbin/apache2 -k start
└─9438 /usr/sbin/apache2 -k start

Apr 20 23:22:55 fog systemd[1]: Starting apache2.service - The Apache HTTP Server…
Apr 20 23:22:55 fog systemd[1]: Started apache2.service - The Apache HTTP Server.

● php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager
Loaded: loaded (/lib/systemd/system/php8.2-fpm.service; enabled; preset: enabled)
Active: active (running) since Sat 2024-04-20 23:22:55 PDT; 19ms ago
Docs: man:php-fpm8.2(8)
Process: 9433 ExecStartPost=/usr/lib/php/php-fpm-socket-helper install /run/php/php-fpm.sock /etc/php/8.2/fpm/pool.d/www.conf 82 (code=exited, status=0/SUCCESS)
Main PID: 9423 (php-fpm8.2)
Status: “Ready to handle connections”
Tasks: 6 (limit: 4588)
Memory: 13.6M
CPU: 146ms
CGroup: /system.slice/php8.2-fpm.service
├─9423 “php-fpm: master process (/etc/php/8.2/fpm/php-fpm.conf)”
├─9428 “php-fpm: pool www”
├─9429 “php-fpm: pool www”
├─9430 “php-fpm: pool www”
├─9431 “php-fpm: pool www”
└─9432 “php-fpm: pool www”

Apr 20 23:22:55 fog systemd[1]: Starting php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager…
Apr 20 23:22:55 fog systemd[1]: Started php8.2-fpm.service - The PHP 8.2 FastCGI Process Manager.
–2024-04-20 23:22:55-- http://192.168.3.200/fog//maintenance/backup_db.php
Connecting to 192.168.3.200:80… connected.
HTTP request sent, awaiting response… 500 Internal Server Error
2024-04-20 23:22:56 ERROR 500: Internal Server Error.

@george1421

sorry for the years delay . i ended up by setting http:// instead of https:// and it worked.