DemoTrust certificate being loaded but not defined in config.xml

I have a strange problem in that the DemoTrust.jks is being loaded when I start any of the managed servers.
I have set-up custom Identity and trust keystores and there is no reference to the DemoTrust keystore anywhere in the config.xml
The problem manifests itself when starting a managed server (WLS9.2) which tries to connect to the Admin server with the secure Administration port enabled for the domain.
This requires 2waySSL and the handshake fails as it appears to be using the DemoTrust.jks keystore.
config.xml extract showing managed server keystore entries
<custom-trust-key-store-file-name>/home/wlserver92/domain/keystores/trust.jks</custom-trust-key-store-file-name>
<custom-trust-key-store-type>JKS</custom-trust-key-store-type>
<custom-trust-key-store-pass-phrase-encrypted>{3DES}QWdToZU27VsIWV4LU3bZnQ==</custom-trust-key-store-pass-phrase-encrypted>
Extract from startup log file
<Jun 16, 2008 12:45:16 PM CEST> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) Server VM Version 1.5.0_11-b03 from Sun Microsystems Inc.>
<Jun 16, 2008 12:45:18 PM CEST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /fs01/app/bea/wlserver9.2/weblogic92/server/lib/DemoTrust.jks.>
<Jun 16, 2008 12:45:18 PM CEST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /fs01/app/bea/wlserver9.2/jdk1.5.0_11/jre/lib/security/cacerts.>
<Jun 16, 2008 12:45:18 PM CEST> <Info> <Management> <BEA-141107> <Version: WebLogic Server Temporary Patch for CR344429 Thu Nov 15 02:22:13 EST 2007
WebLogic Server 9.2 MP2 Mon Jun 25 01:32:01 EDT 2007 952826 >
<Jun 16, 2008 12:45:21 PM CEST> <Warning> <Security> <BEA-090477> <Certificate chain received from wls-admin.test.co.uk - xx.xx.xx.xx was not trusted causing SSL handshake failure.>
<Jun 16, 2008 12:45:21 PM CEST> <Emergency> <Management> <BEA-141151> <The admin server could not be reached at https://wls-admin.test.co.uk:9002.>
<Jun 16, 2008 12:45:21 PM CEST> <Info> <Configuration Management> <BEA-150018> <This server is being started in managed server independence mode in the absence of the admin server.>
<Jun 16, 2008 12:45:21 PM CEST> <Info> <WebLogicServer> <BEA-000215> <Loaded License : /fs01/app/bea/wlserver9.2/license.bea>
<Jun 16, 2008 12:45:21 PM CEST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Jun 16, 2008 12:45:21 PM CEST> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Jun 16, 2008 12:45:21 PM CEST> <Notice> <Log Management> <BEA-170019> <The server log file /fs01/log/dv31/wlserver92/server01/server01_server.log is opened. All server side log events will be written to this file.>
<Jun 16, 2008 12:45:22 PM CEST> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias wls05_test_co_uk from the JKS keystore file /home/wlserver92/domain/keystores/wls05.test.co.uk.jks.>
<Jun 16, 2008 12:45:23 PM CEST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the JKS keystore file /home/wlserver92/domain/keystores/trust.jks.>
<Jun 16, 2008 12:45:23 PM CEST> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Jun 16, 2008 12:45:23 PM CEST> <Critical> <Security> <BEA-090402> <Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.>
<Jun 16, 2008 12:45:23 PM CEST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
weblogic.security.SecurityInitializationException: Authentication denied: Boot identity not valid; The user name and/or password from the boot identity file (boot.properties) is not valid. The boot identity may have been changed since the boot identity file was created. Please edit and update the boot identity file with the proper values of username and password. The first time the updated boot identity file is used to start the server, these new values are encrypted.
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:941)
at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1029)
at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:854)
at weblogic.security.SecurityService.start(SecurityService.java:141)
at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
Truncated. see log file for complete stacktrace
>
<Jun 16, 2008 12:45:23 PM CEST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED>
<Jun 16, 2008 12:45:23 PM CEST> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<Jun 16, 2008 12:45:23 PM CEST> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
Anybody seen this type of behaviour before ???

Hi Sunita,
To define AIA_INSTANCE you have to export these environment variables at least.
export AIA_HOME=/app/soa/aiafp
export MW_HOME=/app/soa/Oracle/Middleware
export SOA_HOME=/app/soa/Oracle/Middleware/Oracle_SOA1
export JAVA_HOME=/usr/jrockit-jdk1.6.0_29-R28.2.2-4.1.0/jre
export AIA_INSTANCE=${AIA_HOME}/aia_instances/AIAPRD
The path will vary and should be replaces as per your installation.
Thanks,
Shantanu

Similar Messages

The servlet faces is referenced in servlet-mapping /faces/*, but not define

Hi all,
I try to deploy an Oracle BPM project to Weblogic Server v10.3 i get some errors.
Caused by: weblogic.management.DeploymentException: [HTTP:101170]The servlet faces is referenced in servlet-mapping /faces/*, but not defined in web.xml.
my web.xml is like following. But as you see i dont use prefix mapping. This project have 1 EAR project and it is include 1 portal web project. And the following web.xml is portal web project's :
<servlet>
<servlet-name>faces</servlet-name>
<servlet-class>javax.faces.webapp.FacesServlet</servlet-class>
<load-on-startup>1</load-on-startup>
</servlet>
<servlet-mapping>
<servlet-name>faces</servlet-name>
<url-pattern>*.jsf</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>faces</servlet-name>
<url-pattern>*.faces</url-pattern>
</servlet-mapping>
Thanks

Could you please try this: deploy the JSF library and then deploy your application? By default, you will find "jsf-1.2.war" under YOUR_WLS_HOME/common/deployable-libraries/.
Regarding the JSF library, please refer to http://download-llnw.oracle.com/docs/cd/E12840_01/wls/docs103/webapp/configurejsfandjtsl.html

Safari 4.0.3 running OSX 10.6.1 - Pages are loading but NOT thumbnails?

Just upgraded to OSX 10.6.1 running Safari 4.0.3 last week - everything was working BEFORE the upgrade - but now for some reason I have an issue where pages ARE loading including larger banners, text flash animations etc, but if the site contains small thumbnails they are not loading.
The icon in the web bar spins and spins for ages and then suddenly where the thumbnails should be I get the blue question make as if the links are broken - which there not as this is happening to well know sites such as youtube gettyimages and ebay and its just to the thumbnails?????
Take ebay for example, the homepage page loads in fine, and if I search for a product - the page with the listing all loads but not the thumbnail images, yet if I click a listing the full page loads without a problem?
Any advice, I have cleared the cookies and javascript database all to no avail?

HI,
Try Safari Maintenance
Carolyn

A certain real estate web site loads, but not the photos. IE does it OK.

www.domain.com.au is a real estate sales page. Most of the site loads but not the photos, just a word 'House' in its place. I tried same site on IE and it all loaded correctly.

See http://kb.mozillazine.org/Images_or_animations_do_not_load
It is possible that you clicked "Block Images" in the right click context menu while trying to save an image.
Check the image exceptions: Tools > Options > Content: Load Images: Exceptions 
See [[Options window - Content panel]]
*A way to see which images are blocked is to click the favicon (Site Identification icon) on the left side of the location bar.
*A click on the "More Information" button will open the Security tab of the "Page Info" window (also accessible via "Tools > Page Info").
*Open the Media tab of the "Page Info" window.
*Select the first image and scroll down though the list with the Down arrow key.
*If an image in the list is grayed and there is a check-mark in the box "Block Images from..." then remove that mark to unblock the images from that domain.

Start routine: only once per teh load but not once per data packet

Hi,
I would like to execute some code in start routine (in update rules) only once per the load but not once per the data packet.
How can I implement this.
Regards,

I once had that same requirement, but in a datasource in R3. I'm not sure if the same solution would work in BW, though. I used a memory id to keep the variable value between packets:
DATA: ... n_globalvar TYPE n ...
then I added...
IMPORT n_globalvar FROM MEMORY ID 'ZMEMID01'.
...at the start of the routine to retrieve to the variable the value from the memory id.
At the end of the code, I exported the variable back to the same memory id...
EXPORT n_globalvar to MEMORY ID 'ZMEMID01'.

The training tutorials under creative cloud learn are loading but not playing

The training tutorials in creative cloud learn are loading but not playing, is there a problem with adobe tv?

Hi sarahhunter1,
Please try playing video in Google chrome browser.
Regards,
Romit Sinha

TS1436 certain cds are being recognized but not burnt propley?

Certain cds are being recognized but not burnt properly?

So I guess theres no one whos encountered this? I can't possibly be the only one. I created the original post before registering.

I have CC and other apps load but not PS

I have CC and other apps load but not PS

Without proper technical info like system specs nobody can say anything.
Mylenium

MP3 Player Auto Starts, How can I get it to load, but not Auto Start

MP3 Player Auto Starts, How can I get it to load, but not
Auto Start
Jeff
http://www.point1music.com/test

How do you code it not to stream?
stopAllSounds();
stop();
playlist = new XML();
playlist.ignoreWhite = true;
playlist.onLoad = function(success) {
if (success) {
_global.songname = [];
_global.songband = [];
_global.songfile = [];
for (var i = 0; i<playlist.firstChild.childNodes.length;
i++) {
_global.songname
= playlist.firstChild.childNodes.attributes.name;
_global.songfile
= playlist.firstChild.childNodes.attributes.file;
trace(songname
+" "+songfile);
_root.createEmptyMovieClip("sound_mc", 1);
_root.sound_mc.sound_obj = new Sound();
_global.song_nr = random(songfile.length);
_root.sound_mc.songStarter(songfile[song_nr],
songname[song_nr]);
MovieClip.prototype.songStarter = function(file, name) {
this.sound_obj.loadSound(file, true);
this.onEnterFrame = function() {
if (this.sound_obj.position>0) {
delete this.onEnterFrame;
this._parent.display_txt.text = name;
} else {
this._parent.display_txt.text = "loading...";
this.sound_obj.onSoundComplete = function() {
(song_nr == songfiles.length-1) ? _global.song_nr=0 :
_global.song_nr++;
_root.sound_mc.songStarter(songfiles[song_nr],
songname[song_nr]);
btn_play.onRelease = function() {
this._parent.sound_mc.songStarter(songfile[song_nr],
songname[song_nr]);
btn_stop.onRelease = function() {
this._parent.sound_mc.sound_obj.stop();
btn_fw.onRelease = function() {
(song_nr == songfile.length-1) ? _global.song_nr=0 :
_global.song_nr++;
_root.sound_mc.songStarter(songfile[song_nr],
songname[song_nr]);
btn_rev.onRelease = function() {
(song_nr == 0) ? _global.song_nr=songfile.length-1 :
_global.song_nr--;
_root.sound_mc.songStarter(songfile[song_nr],
songname[song_nr]);
playlist.load("playlist.xml");

My apple password keeps being reset, but not by me

My i tunes password keeps being reset, but not by me, please help

If you have never shared your password with anyone then your account was hacked. NOT your iPhone, your Apple ID. If you use the same password for other accounts any of them could have been hacked, and your password obtained from that other account. If your password was simple it could have been hacked by brute force. If it is a word found in any dictionary especially. Or if there is anything personally identifiable about it (nickname, pets name, address, name of someone you know).
The really important thing is to get it resolved QUICKLY with Apple Security, and to change all passwords that might have been stored in an iCloud backup of your phone.

UWL displaying workflow NOT defined in the XML

Can someone tell me why/how some workflows are displaying in UWL even though the workflows are not defined in the XML file?

Hi Daniel,
This is the case for many "legacy" workflows launching SAP(Web)GUI transactions or BSPs.
It works like this: if the UWL cannot find a corresponding task type for an arriving work item from Business Workflow in its XML configuration, it assigns the task type "uwl.webflow.default". In the standard uwl xml file you can see that tasks of this type are launched using the SAPTransactionLauncher (not specifying the TransactionCode parameter).
As you can see in the documentation (https://help.sap.com/javadocs/NW04S/SPS09/uw/com/sap/netweaver/bc/uwl/config/doc-files/ActionHandlers.html), if the TransactionCode is empty, the action handler defaults to the Business Workflow transaction "SWK1". This transaction (the UWL is now out of the picture) just redirects to the target transactions defined in the workflow itself.
Any matching entry in the UWL XML configuration will however override this default behavior.
Good question though. Hope this clarifies it to some extend...
Best,
Matthias

[Solved] tun module was loaded but not in lsmod?

Hi Everybody,
I loaded the tun module with "sudo modprobe tun" without any error message but didn't see it anywhere in "sudo lsmod". What might be the problems? I'm using linux-ck and wondering if linux-ck does anything here.
The reason I want to load the tun module is that I saw this error:
[root@ArchCustom openvpn]# openvpn --config ibVPN-LU-Luxembourg-$P2P$.ovpn
Thu Jan 17 08:03:20 2013 OpenVPN 2.2.2 x86_64-unknown-linux-gnu [SSL] [LZO2] [EPOLL] [eurephia] built on Aug 18 2012
Enter Auth Username:[email protected]
Enter Auth Password:
Thu Jan 17 08:03:30 2013 IMPORTANT: OpenVPN's default port number is now 1194, based on an official port number assignment by IANA. OpenVPN 2.0-beta16 and earlier used 5000 as the default port.
Thu Jan 17 08:03:30 2013 NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Thu Jan 17 08:03:30 2013 NOTE: --script-security method='system' is deprecated due to the fact that passed parameters will be subject to shell expansion
Thu Jan 17 08:03:30 2013 LZO compression initialized
Thu Jan 17 08:03:30 2013 Control Channel MTU parms [ L:1578 D:138 EF:38 EB:0 ET:0 EL:0 ]
Thu Jan 17 08:03:30 2013 Socket Buffers: R=[212992->131072] S=[212992->131072]
Thu Jan 17 08:03:30 2013 Data Channel MTU parms [ L:1578 D:1450 EF:46 EB:135 ET:32 EL:0 AF:3/1 ]
Thu Jan 17 08:03:30 2013 Fragmentation MTU parms [ L:1578 D:1300 EF:45 EB:135 ET:33 EL:0 AF:3/1 ]
Thu Jan 17 08:03:30 2013 Local Options hash (VER=V4): '9a22532e'
Thu Jan 17 08:03:30 2013 Expected Remote Options hash (VER=V4): 'e2a912d8'
Thu Jan 17 08:03:30 2013 UDPv4 link local (bound): [undef]:1194
Thu Jan 17 08:03:30 2013 UDPv4 link remote: 212.117.165.18:1194
Thu Jan 17 08:03:30 2013 TLS: Initial packet from 212.117.165.18:1194, sid=bfe5f406 752fd5e9
Thu Jan 17 08:03:31 2013 VERIFY OK: depth=1, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=Fort-Funston_CA/[email protected]
Thu Jan 17 08:03:31 2013 VERIFY OK: nsCertType=SERVER
Thu Jan 17 08:03:31 2013 VERIFY OK: depth=0, /C=US/ST=CA/L=SanFrancisco/O=Fort-Funston/CN=server/[email protected]
Thu Jan 17 08:03:31 2013 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 17 08:03:31 2013 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 17 08:03:31 2013 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Thu Jan 17 08:03:31 2013 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Thu Jan 17 08:03:31 2013 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Thu Jan 17 08:03:31 2013 [server] Peer Connection Initiated with 212.117.165.18:1194
Thu Jan 17 08:03:33 2013 SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
Thu Jan 17 08:03:33 2013 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1 bypass-dhcp,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.10.10.0 255.255.255.0 vpn_gateway,show-net-up,route-gateway 10.10.10.1,ping 2,ping-restart 120,ifconfig 10.10.10.18 255.255.255.0'
Thu Jan 17 08:03:33 2013 Options error: Unrecognized option or missing parameter(s) in [PUSH-OPTIONS]:5: show-net-up (2.2.2)
Thu Jan 17 08:03:33 2013 OPTIONS IMPORT: timers and/or timeouts modified
Thu Jan 17 08:03:33 2013 OPTIONS IMPORT: --ifconfig/up options modified
Thu Jan 17 08:03:33 2013 OPTIONS IMPORT: route options modified
Thu Jan 17 08:03:33 2013 OPTIONS IMPORT: route-related options modified
Thu Jan 17 08:03:33 2013 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Thu Jan 17 08:03:33 2013 ROUTE default_gateway=192.168.4.1
Thu Jan 17 08:03:33 2013 Note: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
Thu Jan 17 08:03:33 2013 /usr/sbin/ip link set dev up mtu 1500
Usage: ip link add [link DEV] [ name ] NAME
[ txqueuelen PACKETS ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
[ numtxqueues QUEUE_COUNT ]
[ numrxqueues QUEUE_COUNT ]
type TYPE [ ARGS ]
ip link delete DEV type TYPE [ ARGS ]
ip link set { dev DEVICE | group DEVGROUP } [ { up | down } ]
[ arp { on | off } ]
[ dynamic { on | off } ]
[ multicast { on | off } ]
[ allmulticast { on | off } ]
[ promisc { on | off } ]
[ trailers { on | off } ]
[ txqueuelen PACKETS ]
[ name NEWNAME ]
[ address LLADDR ]
[ broadcast LLADDR ]
[ mtu MTU ]
[ netns PID ]
[ netns NAME ]
[ alias NAME ]
[ vf NUM [ mac LLADDR ]
[ vlan VLANID [ qos VLAN-QOS ] ]
[ rate TXRATE ] ]
[ spoofchk { on | off} ] ]
[ master DEVICE ]
[ nomaster ]
ip link show [ DEVICE | group GROUP ]
TYPE := { vlan | veth | vcan | dummy | ifb | macvlan | can | bridge }
Thu Jan 17 08:03:33 2013 Linux ip link set failed: external program exited with error status: 255
Thu Jan 17 08:03:33 2013 Exiting
And this is the content of ibVPN-LU-Luxembourg-$P2P$.ovpn:
[root@ArchCustom openvpn]# cat ibVPN-LU-Luxembourg-$P2P$.ovpn
remote lu1.ibvpn.com 1194 udp
remote 212.117.165.18 1194 udp
client
dev tap
resolv-retry infinite
script-security 3 system
explicit-exit-notify 3
persist-key
persist-tun
mute-replay-warnings
ca ibvpn.com.crt
comp-lzo
verb 3
mute 20
ns-cert-type server
fragment 1300
route-delay 2
auth-user-pass
auth-nocache
reneg-sec 0
up "/etc/openvpn/change_resolv_conf.sh up"
down "/etc/openvpn/change_resolv_conf.sh down"
Regards.
Solved: didn't know what happened, installed linux-ck 3.7.3-1-ck, rebooted and everything was fine.
Last edited by dxxvi (2013-01-20 06:10:47)

Trilby wrote:
Isn't this the same issue:
https://bbs.archlinux.org/viewtopic.php … 1#p1217611
If so, please search the forums before creating new threads of duplicate issues.
It looks like the same issue. Actually, I did a search for "tun" in the Networking forum (but not the newbie forum) and still couldn't find an answer.
My /usr/src/linux-3.7.2-2-ck/.config has CONFIG_TUN=m. Then is there any other reason I cannot load the tun module?
Thanks.

My problem: can't get Google or Facebook to load on Firefox. Something odd. Other pages load, but not those. I go to open: and I get a blank page and tab that says Untitled. Google was my default page. please help me resolve

A few minutes earlier this morning, I couldn't get Firefox to load any pages. I was led to one page from this process and I disabled under Add-ons in Tools I disabled the only thing I found --a Google toolbox. and I went back. Tried again, now i get other pages, but not google or facebook. Help please.

Try clearing your cache
[[Deleting cookies]]
[[How to clear cache]]
Also try running in [[Safe Mode]]
[[Troubleshooting extensions and themes]]

Acrobat Plug-in loading but not showing in menu

I had developed an small plug-in in C++ using Acrobat XI SDK for Adobe Acrobat X pro.
the plugin works 100% in my development machine.
But when I copy the api file into other users computers the plug in does not show in the menubar.
when I generate a system report in Acrobat, the plugin is showing as loaded, but it doesn't show in any menu.
any idea?
someone told me that I need to register a prefix for my plug in, but I cannot find any location to register.
thanks
Oscar

Certainly you need to register a prefix, or you may duplicate the plug-in ID, menu ID, and selector and tool IDs from samples or other plug-ins.
But you can quickly test for this problem by removing all other plug-ins.
Check the "only registered plug-ins" option is off.
I can't advise using the Acrobat XI SDK for making Acrobat X plug-ins. Traditionally, uplevels SDKs will make plug-ins that don't load in older versions of Acrobat.

Cant open itunes on system, will load but not open!

Every time I try to open itunes on my computer windows says it has encountered a problem and has to close itunes. I have tryed to uninstall and reinstall it both from the web site and the disk. I have tryed to dissable my McAfee virus protection. I have backed up all of my music and unloaded all of my itunes and ipode applications and folders and tryed to reload just itunes. I have called microsoft and they say it is a dell or itunes problem. I have called dell and they say it is a itunes problem, I called apple and they sent me two emails of whitch I followed to tee, I have scanned for viruses, I have scaned for spyware, and I am stumped. My system recognizes itunes in my programs and I can find all itune applications when loaded but it will not open, help!

I have read all feeds reguarding this problem and tryed installing quicktime standalone, all kinds of spyware etc, I have called dell, windows and apple and they all say it is the other companys problem, itunes and ipod worked for a year and a half and now nothing!!! latest error message I recive is "error# 0x80040707 dll function call crashed" Any help would greatly appreciated!!!! I an about to give up on itunes after three days of this! But i love my ipod please please please help!!!!!!!

DemoTrust certificate being loaded but not defined in config.xml

Similar Messages

Maybe you are looking for