Password Sync not happening in AD with SSL 636

I am working on OIM 9.1.0. I followed the Connector Guide for Microsoft Active Directory Password Synchronization.(Connector version 9.1.1)
Configured AD with SSL. AD SSL Provisioning (636) is working fine.
Configuration of SSL on Weblogic was done (generation of keys, signing, export, etc) & imported the Certificate in AD.
Installed Password Sync on AD(389) without SSL & it worked.
I re-configured it to SSL (AD 636) but it shows errors
Can anyone give some info on it.
***********Inside sgslldpcopenLDAPConnection****************
Debug [2/9/2012 4:43:35 PM] Inside sgsladac c-tor
Debug [2/9/2012 4:43:35 PM] AD Host
Debug [2/9/2012 4:43:35 PM] 10.129.149.131
Debug [2/9/2012 4:43:35 PM]
Debug [2/9/2012 4:43:35 PM] AD Port
Debug [2/9/2012 4:43:35 PM] *636*
Debug [2/9/2012 4:43:35 PM]
Debug [2/9/2012 4:43:35 PM] AD Base DN
Debug [2/9/2012 4:43:35 PM] DC=oimpad,DC=com
Debug [2/9/2012 4:43:35 PM]
Debug [2/9/2012 4:43:35 PM]
Debugging the code
Debug [2/9/2012 4:43:35 PM] Inside ConnectToADSI
Debug [2/9/2012 4:43:35 PM]
ldap_connect failed with
Debug [2/9/2012 4:43:35 PM] Server Down
Debug [2/9/2012 4:43:35 PM]
Debug [2/9/2012 4:43:35 PM]
Connection to AD failed
Debug [2/9/2012 4:43:35 PM]
***********Out of openLDAPConnection****************
Debug [2/9/2012 4:43:35 PM] Inside sgsladac destructor
Debug [2/9/2012 4:43:36 PM] Datastore --- Connect to AD
Debug [2/9/2012 4:43:36 PM]
***********Inside sgslldpcopenLDAPConnection****************
Debug [2/9/2012 4:43:36 PM] Inside sgsladac c-tor
Debug [2/9/2012 4:43:36 PM] AD Host
Debug [2/9/2012 4:43:36 PM] 10.129.149.131
Debug [2/9/2012 4:43:36 PM]
Debug [2/9/2012 4:43:36 PM] AD Port
Debug [2/9/2012 4:43:36 PM] 636
Debug [2/9/2012 4:43:36 PM]
Debug [2/9/2012 4:43:36 PM] AD Base DN
Debug [2/9/2012 4:43:36 PM] DC=oimpad,DC=com
Debug [2/9/2012 4:43:36 PM]
Debug [2/9/2012 4:43:36 PM]
Debugging the code
Debug [2/9/2012 4:43:36 PM] Inside ConnectToADSI
Debug [2/9/2012 4:43:36 PM]
ldap_connect failed with
Debug [2/9/2012 4:43:36 PM] Server Down
Debug [2/9/2012 4:43:36 PM]
Debug [2/9/2012 4:43:36 PM]
Connection to AD failed
Debug [2/9/2012 4:43:36 PM]
***********Out of openLDAPConnection****************
Regards,
Praveen

Both the URLs are working & I configured the SSL one. Telnet to the port also happens with IP & hostname in OIM & Ad servers
http://pwoim:7001/spmlws/OIMProvisioning
https://pwoim:7002/spmlws/OIMProvisioning

Similar Messages

  • When loging in to Itunes it says my password has not yet been used with itunes

    When loging in to itunes it says that my password has not yet been used with itunes

    are you really on ios 4?  why is it jailbroken?
    in ios 7 its settings - safari - block cookies
    Peace, Clyde

  • AD Password Sync connector 9.1.1 With OIM 11g R2 - ERROR OVER SSL

    I have set up AD password sync with from AD to OIM 11G R2
    The password syncs from AD to OIM 11G R2 on non ssl port 389.
    But if fails on SSL Port 636.
    Errors in OIMMain.Log:_
    Debug [10/11/2012 10:49:34 AM] Inside ConnectToADSI
    Debug [10/11/2012 10:49:34 AM]
    ldap_connect failed with
    Debug [10/11/2012 10:49:34 AM] Server Down
    Debug [10/11/2012 10:49:34 AM]
    Steps Carried Out thus far:_
    AD is up and running.
    Configured AD Password Sync Connector on 636 and selected ssl.
    Created Certificate on OIM host, configured custom identity key store on weblogic. Restarted Weblogic.
    Imported Certificate to AD. After this, restarted the AD
    I can Telnet port 636 from OIM Box and also connect to AD through LDAP Browser on 636 and view OU and CN, so this seems fine.
    Provisioning from OIM through Connector Server to AD works over SSL and this works fine.
    Help would be appreciated.
    Many Thanks

    This question is now been fixed.
    Instead of explicitly stating 636 for SSL,
    Use the same port 389 for ssl and also configured oim port to be 140001 which is the ssl port for oim in the configuration of OIM Password Sync.
    Export Certificates from AD to java security keystore and to weblogic keystore
    Export .pem certificate created on OIM host machine to AD.
    Restart weblogic, oim and AD
    Everything would work fine.
    For all the other information, refer to doc.
    Thanks

  • OIM 9102 , AD Password Sync 91x, JBoss 423GA - issue over SSL port.

    Followed the steps describe in "Deploying the connector"
    http://download.oracle.com/docs/cd/E11223_01/doc.910/e11218/install_config.htm#insertedID0
    section
    Pre-Installation both SSL n non-SSL works for SPML verification.
    For JBoss Application Server:
    http://IP ADDRESS:8080/spmlws/services/HttpSoap11
    https://IP ADDRESS:8443/spmlws/services/HttpSoap11
    Post Installation - configured SSL.
    On AD machine logs following error message is displayed:
    MAX_RETRY LIMIT count is not updated: OIM is down
    Following meta-link ID 1073889.1
    https://support.oracle.com/CSP/main/article?cmd=show&type=NOT&doctype=PROBLEM&id=1073889.1
    explains to verify 'oimhost and oimport' - oimhost is machine ip address ( AD machine is able to ping OIM machine through ip address and machine name )
    oimport is 8443
    Any suggestion.
    Or anyone previously successfully deployed password sync over SSL for OIM 9102 and AD Password sync 91x,
    as i found a similar thread in OTN forum where user had issues over SSL.

    Did anyone resolve this issue? I have the same running SSL Password Sync on OAS 10.1.3.4 and OIM 9.1.0.2 BP09a with AD 2003.
    Debug [7/8/2010 6:35:45 AM] oimport is
    Debug [7/8/2010 6:35:45 AM] 4443
    Debug [7/8/2010 6:35:45 AM]
    Debug [7/8/2010 6:35:45 AM] oimsslclient is
    Debug [7/8/2010 6:35:45 AM] nw-dc-01.nwocaland.nwoca.org
    Debug [7/8/2010 6:35:45 AM]
    Debug [7/8/2010 6:35:45 AM] oimuserattr is
    Debug [7/8/2010 6:35:45 AM] USR_UDF_SAM_ACCTNAME
    Debug [7/8/2010 6:35:45 AM]
    Debug [7/8/2010 6:35:45 AM] oimusessl is
    Debug [7/8/2010 6:35:45 AM] Y
    Debug [7/8/2010 6:35:45 AM]
    Debug [7/8/2010 6:35:45 AM] oimappservertype is
    Debug [7/8/2010 6:35:45 AM] 2
    Debug [7/8/2010 6:35:45 AM]
    Debug [7/8/2010 6:35:45 AM] End of sgsloidi::getConfigParamters
    Debug [7/8/2010 6:35:45 AM] Inside sgsloidi::setParameters
    Debug [7/8/2010 6:35:45 AM] The SOAP start element is
    Debug [7/8/2010 6:35:45 AM] <SPMLv2Document xmlns="http://xmlns.oracle.com/OIM/provisioning">
    Debug [7/8/2010 6:35:45 AM] The SOAP end element is
    Debug [7/8/2010 6:35:45 AM] </SPMLv2Document>
    Debug [7/8/2010 6:35:45 AM] The path is
    Debug [7/8/2010 6:35:45 AM] /spmlws/HttpSoap11
    Debug [7/8/2010 6:35:45 AM] End of sgsloidi::setParameters

  • OIM-AD password sync not working

    Hi All,
    I am trying to sync password b/w AD and OIM. I have installed the password sync connector and followed the steps specified in the connector document. However when i change the password in AD, it is not reflected in OIM.
    The connector version is 11.1.1.5. And the following have been done
    1. deployed SPML-DSML service
    2. Tested the SPML-DSML service
    3. Installed the connector
    4. Enabled the logs
    5. Configured IT resource and enabled SSL
    But the password changed in AD is not reflected in OIM. Please let me know if any additional steps have to performed.
    Thanks

    Hi Raghav,
    Please find the log below
    Debug [1/19/2012 3:54:05 PM] Inside sgsladds::sgslperwriteData YOOOO
    Debug [1/19/2012 3:54:05 PM] Inside sgsladac c-tor
    Debug [1/19/2012 3:54:05 PM] AD Host
    Debug [1/19/2012 3:54:05 PM] localhost
    Debug [1/19/2012 3:54:05 PM]
    Debug [1/19/2012 3:54:05 PM] AD Port
    Debug [1/19/2012 3:54:05 PM] 636
    Debug [1/19/2012 3:54:05 PM]
    Debug [1/19/2012 3:54:05 PM] AD Base DN
    Debug [1/19/2012 3:54:05 PM] DC=abc,DC=xyz,DC=com
    Debug [1/19/2012 3:54:05 PM]
    Debug [1/19/2012 3:54:05 PM] Only dataattribute
    Debug [1/19/2012 3:54:05 PM] Got Registry enteries
    Debug [1/19/2012 3:54:05 PM] contact
    Debug [1/19/2012 3:54:05 PM] description
    Debug [1/19/2012 3:54:05 PM] Got Entiredn
    Debug [1/19/2012 3:54:05 PM] OU=oimpwdsynctms.abc.xyz,ou=org1,DC=abc,DC=xyz,DC=com
    Debug [1/19/2012 3:54:05 PM] Encrypted record already exists in Datastore
    Debug [1/19/2012 3:54:05 PM] Already Exists
    Debug [1/19/2012 3:54:05 PM] Encrypted record already exists in Datastore
    Debug [1/19/2012 3:54:05 PM] Already Exists
    Debug [1/19/2012 3:54:05 PM] Inside sgsladdsSearchUser
    Debug [1/19/2012 3:54:05 PM] Firing Search Request
    Debug [1/19/2012 3:54:05 PM] AD search for a user objectGUID is successfull
    Debug [1/19/2012 3:54:05 PM] Count success
    Debug [1/19/2012 3:54:05 PM] Search result fetched
    Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
    Debug [1/19/2012 3:54:05 PM] --------------------&&&----------------
    Debug [1/19/2012 3:54:05 PM] Inside sgsladds::sgsladdsgetData NEW Look
    Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
    Debug [1/19/2012 3:54:05 PM] Encoded Data Extracted in sgsladdsgetData
    Debug [1/19/2012 3:54:05 PM] 319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
    Debug [1/19/2012 3:54:05 PM] Moving out sgsladdsgetData
    Debug [1/19/2012 3:54:05 PM] Encoded Data Extracted
    Debug [1/19/2012 3:54:05 PM] 319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
    Debug [1/19/2012 3:54:05 PM] MAX_RETRY LIMIT count is not updated: OIM is down
    Debug [1/19/2012 3:54:05 PM] 0
    Debug [1/19/2012 3:54:05 PM] numretries ======
    Debug [1/19/2012 3:54:05 PM] 0
    Debug [1/19/2012 3:54:05 PM] Inside sgslcodsupdateChild
    Debug [1/19/2012 3:54:05 PM] 0:319 10 230 308 AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAA6msQnVk0HkW+zmHr7+2nyAAAAAAmAAAAUABhAHMAcwB3AG8AcgBkACAARQBuAGMAcgBwAHQAaQBvAG4AAAADZgAAqAAAABAAAABU2g1ES3TOo35N6+zJPunGAAAAAASAAACgAAAAEAAAAEsx8lF3vt0oEaE0BhubB/A4AAAAl0IEcVLgvhvZryqKTWzBkjEatBoCMvekzXvlLlUfj/moGrX2NgWL9zlmeLKY9scstvPONOalbbgUAAAArNCxOGd02kIZELgCavo2IZpN5ZA=
    Debug [1/19/2012 3:54:05 PM]
    Encrypted record data updated successfully
    Debug [1/19/2012 3:54:05 PM] Inside sgsladac destructor
    Debug [1/19/2012 3:54:05 PM] Password updation failed in child process
    Debug [1/19/2012 3:54:05 PM]
    Relaxing while processing records from datastore
    I have provided the correct port numbers and also my certificate is same as the OIM server name. But still when the password is changed in AD, its not updated in OIM.
    Thanks,
    Bhavana

  • Using a Mac, Firefox does not allow me to use the vertical scroll bar real-time in Godaddy webmail. It lags and jumps. Godaddy says it is a browser issue. Does not happen in Safari with Mac OS 10.4.11 or on PC w/windows vista.

    The problem is not my server (Comcast) as it does not happen on Safari when trying different websites as well as Godaddy.com or my Godaddy webmail. The problem is only when using my Mac OS X 10.4.11 (not my Windows Vista PC) in Firefox. I only began noticing this recently. Godaddy says this is a browser issue with my Mac as they cannot replicate it.
    == URL of affected sites ==
    https://login.secureserver.net/index.php?app=wbe&clearcookies=1

    The problem is not my server (Comcast) as it does not happen on Safari when trying different websites as well as Godaddy.com or my Godaddy webmail. The problem is only when using my Mac OS X 10.4.11 (not my Windows Vista PC) in Firefox. I only began noticing this recently. Godaddy says this is a browser issue with my Mac as they cannot replicate it.
    == URL of affected sites ==
    https://login.secureserver.net/index.php?app=wbe&clearcookies=1

  • Optimization not happening in PPDS with synchronisation resource

    Hi,
    I have maintained synchronisation resource in recipe and same has been came to APO PPM also, but when i am running optimization with this syncronisation resource capacity overload error is coming and optimization not happening.
    All the orders which i am trying to schedule through optimization  getting deallocated on DS board.
    Kindly give some favourable solution.
    regards
    pradeepta

    Hi
    My question was resolved
    Regards
    pradeepta

  • Sync notes on the iPad with my iMac?

    The Notes program on the iPad states that iCloud allows you to sync with you iPhone and iMac.  Where would my synced notes be on the iMac, I cannot find them.

    They're in Mail (Mac Mail).
    In a Notes folder in the left sidebar under the Reminders heading.

  • Email Sync not happening??

    I am having issues with Sync of Address Book (Operating System LION) to the iPad 2 Contacts...does not copy emails onto iPad.
    Please Help me!!!

    Anthony,
    the Sync will work with your Calendar, and Address book and Notes. for e-mail it only copies email account information not the e-mails in the account. (This saves you the step of setting it up manually on the iPad)
    you will need to input your password for your e-mail on your ipad and thenthe e-mail account should start working on your iPad.

  • Photo syncing not happening during sync

    I got a new computer and moved all my media over to it. I the backed up my iphone and ran a sync. My calendar, contacts, apps, and music all synced with no problem. However the photo folders that i have chosen to sync are not doing so. Periodically i have seen a message that says something about a "mobile uploader" not working properly. I have since run a restore but am still getting the same results. Any suggestions?

    Only photos taken with your phone can be restored, they are part of the iphone backup (http://support.apple.com/kb/HT1766). If you want these photos back, you'll have to restore from a backup.

  • Syncing Notes taken in 'CourseNotes' with iCloud

    I just downloaded the app 'CourseNotes' from the app store and i wanted to know whether anyone knew how to save the notes taken within this app onto icloud or even just how to back the up apart from on an Ipad?  Thanks

    I don't see any reported System Issues on the System Status site, but it has happened before. However, I was looking at the iCloud support manual, and Mail/Notes are together under the same help section. This leads me to believe that you need this iCloud account set up in mail in order for both (or either) to work.
    Not absolutey sure about that, but I can tell you that as we were going back and forth, I added a new note to my Mac, and it showed up immediately on my iPhone (like instantly) - same the other way around....that doesn't mean that a server somewhere isn't having a problem, and yours may be one that is.
    But, can't think that it would hurt to try to put add your iCloud account to your Mail account to see if it clears the Notes problem up....
    If you do try it, and it works, can you let me know?
    Cheers, and best of luck with this!
    GB

  • I need to sync notes on my ipad with outlook 2010.   Please help!

    I just got the orginal ipad and need to sync it with notes in outlook 2010. I now see that 2010 is not supported! Is there an app which could bridge the gap? Or will apple be supporting 2010 soon?

    You need to restore your iPad from iTunes.
    Start iTunes.
    Plug in your iPad using the USB cable.
    Click on the iPad in the left hand column under "Devices".
    In the "Summary" tab, there are options to Back up, Update and Restore.
    Choose Restore, choose the backup and let it run.
    http://support.apple.com/kb/HT1414
    If your old iPad was capable of receiving data on the go, without wifi, then you have a SIM installed. Best to check anyway. You need either the tool supplied in the box, or the end of a paper clip to open the tray
    http://support.apple.com/kb/HT5163

  • Active Sync not Working - Exchange 2013 with Exchange 2007

    Hi
    Recently we introduced Exchange 2013 servers to our existing Exchange 2007 organization. The servers are just configured with default self-signed certificate and URLs are pointing to server FQDNs.
    Everything is at default as far as configuration is concerned in Exchange 2013.
    After just introducing the Exchange 2013 CAS servers was checking the ActiveSync functionality using a new mailbox created on Exchange 2013. We have not yet published our Exchange 2013 servers to
    Internet (before even doing that, want to ensure ActiveSync is working). We're connecting using our Private network and trying to make a connection to CAS FQDN. Checked a iOS7 (iPad) and a Windows Phone device, both of them configure successfully (with the
    certificate warning, which is obvious) but when it comes to synchronizing the contents they fail saying "Cannot Get Mail. Connection to Server Failed"
    Checked the IIS Logs on CAS server and found that the device makes a successful connection - as is indicated by successful configuration but thereafter nothing happnes on the device and no error
    logged in Event Viewer as well. Could it be that the mailbox server is denying the connection....how to check. How to go ahead with the troubleshooting.
    Everything else expect ActiveSync is working perfectly. Tries accessing the ActiveSync VD using the link
    HTTPS://Server_FQDN/Microsoft-Server-ActiveSync, this pops-up a window asking for credentials – which is normal behavior indicating ActiveSync virtual directory is good.
    Thanks
    Taranjeet Singh
    zamn

    Hey Guys
    Just to update here my initial testing revieled that if I run Test-ActiveSyncConnectivity by not specifying the -URL parameter like this:
    Test-ActiveSyncConnectivity -MailboxCredential (get-credential User1) |FL
     the command fails for an obvious reason as shown in the result. The command is getting the mailbox server name in the ActiveSync URL returned automatically:
    ClientAccessServer         
    : SITE-MBX-02.ABC.COM
    Scenario                   
    : Options
    ScenarioDescription        
    : Issue an HTTP OPTIONS command to retrieve the Exchange ActiveSync protocol version.
    PerformanceCounterName     
    : DirectPush Latency
    Result                     
    : Failure
    Error                      
    : The OPTIONS command returned HTTP 200, but the Exchange ActiveSync header
                               (MS-Server-ActiveSync) wasn't returned. The request likely did not reach a
    Client Access
    server, either because
    - A proxy server intervened (check the headers below for any that may have been
    returned by a proxy)
    -The virtual directory could not be reached:
    https://SITE-MBX-02.ABC.COM/Microsoft-Server-ActiveSync
                         - The virtual directory does not point to a Client Access server:
    https://SITE-MBX-02.ABC.COM/Microsoft-Server-ActiveSync
    If however, I manually provide the -URL parameter value with FQDN of CAS server:
    Test-ActiveSyncConnectivity -URL
    https://SITE-CAS-02.ABC.COM/Microsoft-Server-ActiveSync
    -MailboxCredential (get-credential User1) |FL
    it succeeds.
    We have our CAS and Mailbox servers installed on separate systems - no colocation.
    This is strange and makes me curious to find out, where does the command without -URL parameter is getting the ActiveSync URL that has mailbox server in it. I checked that the new Exchange 2013 CAS servers have InternalURL parameteres populated with their
    own FQDNs and the ExternalURL is empty for now.
    Need help in drilling down this further.
    Thanks
    Taranjeet Singh 
    zamn

  • Sync not happening

    After the latest update, Itunes freezes when I try to sincronize my Ipod.
    I have to use windows task manager to exit from Itunes with no changes in my library.
    Is there another update coming up to fix this bug? I've seen I'm not alone on this.

    Hello again, Zamboomba.
    Thank you for the update on your troubleshooting so far. If following all the recommended steps from the referenced Knowledge Base have not helped resolve your issue then due to the nature of your issue you may find more information by using another one of Apple's support resources - https://getsupport.apple.com/GetproductgroupList.action to get a more hands-on response.
    Cheers,
    Pedro

  • Sync not work (exim conflicts with exim)

    Hi,
    i have change the default MTA exim with "Postfix".
    first:
    #pacman -R exim
    after:
    #pacman -S postfix
    and work fine but now:
    # pacman -Syu
    :: Synchronizing package databases...
    current.db.tar.gz        [#################################] 100% |     29K
    unofficial.db.tar.gz     [#################################] 100% |     45K
    :: libidl-0.6.8-2: local version is newer
    error: exim conflicts with exim
    :: Above packages will be skipped.  To manually upgrade use 'pacman -S <pkg>'
    Any idea.

    apeiro wrote:I followed your steps but could not reproduce the problem.  Do you have an exim-* directory in /var/lib/pacman/local?  Perhaps the remove process did not finish properly.
    I have remove all file of exim but the error it continues.

Maybe you are looking for