Linux-Networking Digest #328, Volume #11 Sat, 29 May 99 15:13:37 EDT
Contents:
Re: Samba need help (Monte Phillips)
Re: LCP: timeout sending Config-Requests PPP FAILURE! Follow-up (Clifford Kite)
Re: Problem Getting Mail ... Please Help ! (Clifford Kite)
Re: PPP Chatscripts Wrong-Help (Clifford Kite)
The First Arabic Site about Linux ("Essam Al-Zamel")
Re: dsl and PPP at the same time... (Clifford Kite)
ISP connection problems ("Evil Angel")
Re: Multiple IP accounts (Clifford Kite)
Re: Minicom Help Requested (Arthur)
Re: Printing (Sergiu Condorovici)
Re: can't find rc.local file ("K.A. Steensma")
direcpc with linux redaht 6.0 ("Ben Marsh")
Re: ROOT-access and SSH-login (Juergen Leising)
Multiple IP accounts ("Alfredo Todini")
Bind 8 and Dial-on-Demand/IPMASQ ([EMAIL PROTECTED])
Re: slow telnet and no ftp, but great http ("ArTec - Vincent MAURY")
Re: Problem Getting Mail ... Please Help ! (Cooper)
Re: Can't telnet to Linux Red Hat 6.0 box. (Derek Lucas)
Re: DNS ("Andrey Smirnov")
Re: could I use another kernel? ("Dave")
IP Masq and Half Life? (Steve Ledford)
Re: pppd 1 hour delay ("Kai Krakow")
Re: Problem Getting Mail ... Please Help ! (james marshall)
NFS block size for 3C523 NIC? (Georg Schwarz)
Help with Masquerading. ("jimlynn")
Re: Linux in NT Network (R. Denoire)
----------------------------------------------------------------------------
From: [EMAIL PROTECTED] (Monte Phillips)
Subject: Re: Samba need help
Date: Sat, 29 May 1999 12:23:01 GMT
Don't.
For security reasons and reduced frustration reasons do the following.
Make duplicate directories under /home or wherever your users main dir
is called, and put SYMBOLIC links of the progs you want them to have
access too.
Example if you hve some files in /sbin that you wish them to have make
a /home/sbin and symbolic links in that. This uses almost no HD space
and still maintains maximum security from fools, and sloppy users.
>I've got samba up and working. Now I'm trying to add folders to be
>shared but I'm having some trouble. The only folders I can access right
>are the individual users home directories. Besides those I'd like to
>add directories that all the users can see or that only valid users can
>see. How do I edit my smb.config to do this?
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: LCP: timeout sending Config-Requests PPP FAILURE! Follow-up
Date: 29 May 1999 08:27:28 -0500
Brandon Edens ([EMAIL PROTECTED]) wrote:
: I've been constantly tweaking lcp-max-configure in an attempt to get
: further into the ConfReq. Judging from the time stamps of most
: sessions, it would seem that I'm losing a ton of rcvd LCP packets
: (modem init strings?). If anyone could help me somehow clear up the
These symptoms are very similar to those for a misconfigured UART. There
is some communication: you respond to the peer's requests and there is
at least one Ack from the peer to one of your messages. The negotiations
have a sloppy appearence and are drawn out. You are pushing the maximum
number of LCP negotiations further and further out.
In my first reply in this thread I wrote:
There is one thing that bothers me a little and that is that the
UART you mention is a 16550, which apparently worked so poorly that
it was rapidly replaced by the 16550A . You may have meant a 16550A,
but if not, be aware that a 16550A must be configured by setserial as
a 16550A and not as a 16550 . Configuration is done by setserial in
one of the boot-up files.
You haven't responded and I'd assumed that you found both the UART and
UART configuration were OK. But these latest link negotiation messages
strongly indicate something wrong with the UART, the UART configuration,
the modem, or the settings of the modem's internal profile.
You also should drop the pppd options mtu 552 and mru 552 until things
are working right.
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* Speak softly and carry a +6 two-handed sword. */
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Crossposted-To: alt.os.linux.slackware
Subject: Re: Problem Getting Mail ... Please Help !
Date: 29 May 1999 07:37:17 -0500
Desmond Coughlan ([EMAIL PROTECTED]) wrote:
: I still can't get my e-mail. This morning, I ran fetchmail -v as
: normal, and saw five messages arriving as normal. I then went into
: Emacs, and activated RMAIL. No new messages. I telnetted to port 110
: of my ISP's mailserver, and saw that the messages were gone.
: The question is: where have these messages gone? Why have they not
: been delivered to my mailbox? Can I get them back?
Probably /dev/null. I *think* what you need is to set the mda parameter
under the defaults section. Probably not. Here's my mda line:
mda "/usr/sbin/sendmail -oem %s"
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* Governments should be changed like diapers - often and for the
* same reason. */
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: PPP Chatscripts Wrong-Help
Date: 29 May 1999 07:46:19 -0500
Charles Huang ([EMAIL PROTECTED]) wrote:
: I am using PPP-2.3.5 to connect to my ISP.
: Kernal support is fine.
: TCP/IP is find.
: ppp-on, ppp-on-dialup are configured for PAP and Dynamic IP as usual.
: modems dials, and connect, but it fails at the authenticate stage.
: The /var/log/messages says that the Chat spripts failed.
If you have a login/password authentication then you can try replacing
CONNECT '' with CONNECT '\d\c' in the chat script. If you have PAP
or CHAP authentication you'll have to post some logs before we can guess
what's happened with any degree of accuracy.
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* Better is the enemy of good enough. */
------------------------------
From: "Essam Al-Zamel" <[EMAIL PROTECTED]>
Subject: The First Arabic Site about Linux
Date: Fri, 28 May 1999 21:14:49 -0500
http://www.linux4arab.com
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: dsl and PPP at the same time...
Date: 29 May 1999 09:16:52 -0500
Bill Unruh ([EMAIL PROTECTED]) wrote:
: Then put the line
: route add -net 123.231.213.0 gw 123.231.214.9 ppp0
: into /etc/ppp/ip.up.local
: to add the explicit route to your office subnet.
If SuSE 6.1 has a series 2.2.x kernel the form for route may have to be
route add -net 123.231.213.0 gw 123.231.214.9 netmask 255.255.255.0 ppp0
assuming a class C subnet at work. I don't know why the new kernel or
route is pickier but it seems to be so.
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
/* My confidence in this answer (X), on a scale of 1 to 10:
|----|----|----|----|----|----|----|----|----|X---|
0----1----2----3----4----5----6----7----8----9----10 */
------------------------------
From: "Evil Angel" <[EMAIL PROTECTED]>
Subject: ISP connection problems
Date: Fri, 28 May 1999 11:52:00 -0500
I recently installed linux and am quite new to it. I want to set up a
dial-up connection to my ISP so that I can basically browse the net to get
more info on linux. I am currently using the Mandrake festen distro with
the kde desktop. I have tried using the kpppd program that is on kde and
seem to connect to my isp fine but, I can not ping anything and when I try
to use a browser I cant connect to anything.
Does anyone have any ideas as to what I need to do to get this working?
Any help would be greatly appreciated!!
Thanks
------------------------------
From: kite@NoSpam.%inetport.com (Clifford Kite)
Subject: Re: Multiple IP accounts
Date: 29 May 1999 10:08:54 -0500
Alfredo Todini ([EMAIL PROTECTED]) wrote:
: I have two PPP dialup accounts. How should I set up the /etc/resolv.conf
: file to handle multiple accounts? (They have different domains).
man 5 resolver
--
Clifford Kite <kite@inet%port.com> Not a guru. (tm)
------------------------------
From: [EMAIL PROTECTED] (Arthur)
Subject: Re: Minicom Help Requested
Date: 29 May 1999 16:13:46 GMT
Reply-To: [EMAIL PROTECTED]
It just occurred to me that I forgot to describe the error msg I'm getting
which is: "Cannot open /dev/modem. Permission denied. Also, I can open a
minicom connection as root but not as a regular user.
Thanks.
On 29 May 1999 06:50:31 GMT, Arthur <[EMAIL PROTECTED]> wrote:
>I am running Redhat 6.0 and am having some problems connecting to my ISP
>thru Minicom.
>
>I'm new to this so I'm not sure what it all means, but /dev/modem is a
>symlink to /dev/ttyS1 and shows owner root group root and permissions
>rwx rwx rwx. /dev/ttyS1 shows owner root group tty and permissions
>rw- rw- and ---.
>
>For what it's worth, I am able to establish a ppp connection to my ISP
>using either the Usernet utility or from the command line. If anyone
>could point me in the right direction on how to establish one using
>Minicom, I'd appreciate it.
>
>Thanks
------------------------------
From: Sergiu Condorovici <[EMAIL PROTECTED]>
Subject: Re: Printing
Date: Sat, 29 May 1999 11:54:17 -0400
Arthur Merar wrote:
> Hello,
>
> I need a copy of JetAdmin for Red Hat 5.2.......where can I get a
> copy?
>
> Please e-mail me.
>
> Thanks,
>
> Arthur
> [EMAIL PROTECTED]
You do not need JetAdmin. It is enough to configure HP printer for
TCP/IP and after that to edit /etc/printcap or to run printtool from
control-panel if X11 is installed.
This is my printcap (192.168.0.247: is the IP for the printer).
####################
##PRINTTOOL3## REMOTE ljet4 600x600 letter {} LaserJet4 Default 1
lp:\
:sd=/var/spool/lpd/lp:\
:mx#0:\
:rm=192.168.0.247:\
:rp=lj:\
:if=/var/spool/lpd/lp/filter:\
:sh:
------------------------------
From: "K.A. Steensma" <[EMAIL PROTECTED]>
Subject: Re: can't find rc.local file
Date: Sat, 29 May 1999 13:39:35 GMT
Mine is located in : /etc/rc.d
Mine is a standard RH 6.0 machine. KAS
John Hornblow wrote:
> Hi, I was following some instructions on masquarading ...
> I was instructed to edit rc.local in rc.d directory...
> Red hat 6 doent have one...
>
> I have an "rc" and "rc.sysinit"
> which do I edit to enable masquerading?
>
> thanks
>
> John
>
> =====================================================
> John Hornblow
> gliding page http://www.soar.co.nz/
> =====================================================
------------------------------
From: "Ben Marsh" <[EMAIL PROTECTED]>
Subject: direcpc with linux redaht 6.0
Date: Sat, 29 May 1999 09:56:17 -0400
Hi,
Has anyone been able to setup direcpc on their linux systems? I have been
unable to find anything about setting this up, and the direcpc tech people
aren't exactly helpful.
Thank you for any help,
Ben Marsh
------------------------------
From: [EMAIL PROTECTED] (Juergen Leising)
Subject: Re: ROOT-access and SSH-login
Date: 29 May 1999 12:41:56 GMT
Reply-To: [EMAIL PROTECTED]
On Fri, 28 May 1999 23:22:48 GMT, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote:
(...)
>
>What the problem is:
>*root access should permitted only for a specific host
>*mail clients cannot login as a user and perform su, cause of
> pop3
>
>I think there must be a way...
ssh is it - compare /etc/sshd_conf (for ssh version 1.x) resp.
/etc/ssh2/sshd_conf (for ssh version 2.x):
(...)
PermitRootLogin yes
(...)
AllowHosts localhost, foobar.com, friendly.org
DenyHosts evil.org, aol.com
(...)
Have a look at
http://www.ssh.fi/
Most recent version is ssh-2.0.13. Main advantage of ssh is:
Passwords are transferred in an encrypted way! This is important due to
sniffers and similar things.
You login in your remote computer (comp.org) by
ssh comp.org
or if you want to use a login name differen from your actual login name:
ssh -l your_remote_name comp.org
The remote computer has to run sshd; ssh version 2 can talk to sshd version 1
(downwards compatible).
Bye, Juergen.
--
*****************************************************************
* Juergen Leising, E-Mail: [EMAIL PROTECTED] *
* http://www.stud.uni-bayreuth.de/~a0037/ *
*****************************************************************
------------------------------
From: "Alfredo Todini" <[EMAIL PROTECTED]>
Subject: Multiple IP accounts
Date: Sat, 29 May 1999 16:25:25 +0200
I have two PPP dialup accounts. How should I set up the /etc/resolv.conf
file to handle multiple accounts? (They have different domains).
Thank you.
Alfredo Todini
[EMAIL PROTECTED]
------------------------------
From: [EMAIL PROTECTED]
Subject: Bind 8 and Dial-on-Demand/IPMASQ
Date: Tue, 18 May 1999 12:44:29 GMT
I am using a Linux box to provide dial-on-demand access
for my home network. I recently upgraded from RH51 to RH6
and have run into a small problem. I am running Bind on
the box so that my Win9X machines won't receive a timeout
while the link is coming up. In order to flush bind's name
cache, I do a restart on bind in the ip-down script. I have
to do the restart because if I ask for a cached name while the
link is down it will reply before the link comes up and the
client machine will be routed into never-never land.
With the old version of bind I just set it up as a forwarding
only nameserver. When I did the restart everthing worked
great. However, with Bind 8, it queries something on the
internet (root name servers?) whenever I do a restart, even
though it is configured as a forwarding only nameserver. This
causes my link to stay up (it gets restarted in ip-down and
brings the link back up).
I have patched it up by deleting all root server entries
in the named.ca file except one, and changing it
to 127.0.0.1. This way it just looks at itself and doesn't
bring the link up. Everything works fine this way, except I
get a good deal of complaining in the syslog.
Any ideas about a better way to do this? I basically need
a forwarding only nameserver that won't try to hit the net
when it is restarted.... or some other way of clearing bind's
cache... which I don't think can be done any other way.
--== Sent via Deja.com http://www.deja.com/ ==--
---Share what you know. Learn what you don't.---
------------------------------
From: "ArTec - Vincent MAURY" <[EMAIL PROTECTED]>
Subject: Re: slow telnet and no ftp, but great http
Date: 29 May 1999 14:39:49 GMT
I've exactly the same problem; the ftp in working, but as slow as the
telnet (5 minutes waiting ....)
David S. Dewitt <[EMAIL PROTECTED]> a �crit dans l'article
<7il4g7$uum$[EMAIL PROTECTED]>...
> I am having no luck on getting ftpd and telnetd working correctly.
> I hope someone may shed some light for me.
> Quick overview:
>
> I have 2 pc one for Linux and one with win98 connect via network
>
> I am able to ping either way
> If i set up a ftpserver on the win98 machine I have no problems.
> When I http to the linux box -- no problem at all everthing work fast
and
> great.
> When I try to ftp to the linux box -- no luck
> When I try to telnet to the linux box it takes about 5 minutes to get a
> login prompt.
------------------------------
From: Cooper <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux.slackware
Subject: Re: Problem Getting Mail ... Please Help !
Date: Sat, 29 May 1999 19:34:06 -0100
Desmond Coughlan wrote:
>
> Hi all,
> I still can't get my e-mail. This morning, I ran fetchmail -v as
> normal, and saw five messages arriving as normal. I then went into
> Emacs, and activated RMAIL. No new messages. I telnetted to port 110
> of my ISP's mailserver, and saw that the messages were gone.
>
> The question is: where have these messages gone? Why have they not
> been delivered to my mailbox? Can I get them back?
>
> OK, so that's three questions, but you get the idea ...
>
> I'd appreciate your help, as I feel lost without my e-mail ...
Try running "sendmail -q".
Your messages are probably in sendmail's queue, awaiting delivery. That
command is supposed to say "deliver *NOW*" to sendmail.
If this doesn't do the trick, look through the /var/spool directories.
They're probably in there somewhere.
Cooper
--
Linux: Proof of intelligent life on earth
------------------------------
Date: Tue, 18 May 1999 09:12:43 -0400
From: Derek Lucas <[EMAIL PROTECTED]>
Subject: Re: Can't telnet to Linux Red Hat 6.0 box.
Perhaps the port is not set to the correct telnet port in the client you
are using? The default telnet port is 23.
--
Derek Lucas
Systems Administrator
OneNet Communications, Inc.
513.618.1000 : [EMAIL PROTECTED]
On 18 May 1999, The Phreique wrote:
>
> I've seen a few telnet questions on here, but mine seems to be a problem
> that no one's seen. This is the problem:
>
> When I try to telnet to my machine I get a connection refused message.
> However when I telnet to work (from home), and then back to my machine
> everything works ok.
>
> I looked in the hosts.allow and deny files.... they're blank (asside from
> some comments).
>
> Any suggestions?
>
> :-)
>
>
> -Sterling W. Lombard (The Phreique)
> http://www.primenet.com/~slombard
>
>
>
------------------------------
From: "Andrey Smirnov" <[EMAIL PROTECTED]>
Subject: Re: DNS
Date: Sat, 29 May 1999 10:44:53 -0700
Hello!
Try reading HOWTOs on DNS at http://www.linux.org
Good luck!
PS. Is tech.mydomain.com subdomain or machine within mydomain.com?
Afrasiab Ahmad wrote in message ...
>A stupid question here...I am learing about DNS...
>
>Suppose I want to add another machine onto the net...
>
>
> Internet
> ^
> |
> |
> maindomain.com
> |
> tech.maindomain.com
>
>So, maindomain.com is live on the internet, and so is tech.maindomain.com,
>as they both have non-private IP numbers (!= 192.168.x.x.) .
>
>The DNS runs on maindomain.com (for our network).
>
>My confusion is, how do I tell the "world" about tech.maindomain.com - or,
>in other words, what should I edit in the DNS files of maindomain.com ?
>
>I don't want to run a DNS server on tech.maindomain.com but I want
>tech.maindomain.com to use maindomain.com's DNS. Do I use maindomain.com
>as a gateway?
>
>Thank you.
>
>Afra
>
------------------------------
From: "Dave" <[EMAIL PROTECTED]>
Subject: Re: could I use another kernel?
Date: Sat, 29 May 1999 13:46:57 -0400
Thanks John
John Hovell <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]...
> John --
>
> John Hornblow wrote:
>
> >
> > hi, Ive had no luck [yet!] compiling a kernel that enables
> > Masquerading...
> >
> > Could I use one from someone else?
> > If someone emailed me one would it work on my redhat 6.0 machine?
> >
>
> hmm... not sure this is such a good idea... a compiled kernel image is
> custom built to the particular system -- meaning it should include all
> regularly used hardware, and as little else as practical. In theory,
> you could get a kernel that would work, but it wouldn't be what you want
> to do.
>
> However, setting up IP masquerading is very straightforward, and will
> work with a stock RedHat 6.0 install very easily.
>
> You need to read the IP Masquerade Mini HOWTO:
> http://metalab.unc.edu/linux/HOWTO/mini/IP-Masquerade.html
>
> Basically, use "make menuconfig" from /usr/src/linux/ and be sure to
> compile the dozen or so things they say you should have:
> http://metalab.unc.edu/linux/HOWTO/mini/IP-Masquerade-3.html#ss3.1
>
> do make bzImage ; make modules ; make modules_install
>
> Reboot w/ new kernel in place, then execute some ipchains commands
> (covered in the HOWTO).
>
> That's all there is to it.
> -John
>
> >
> > thanks
> >
> > John
> >
> > =====================================================
> > John Hornblow
> > gliding page http://www.soar.co.nz/
> > =====================================================
>
------------------------------
From: Steve Ledford <[EMAIL PROTECTED]>
Subject: IP Masq and Half Life?
Date: Sat, 29 May 1999 10:29:04 -0500
Does anyone know how to get Half Life to work on a Win95 PC behind a
Linux IP Masq box on the internet? The Linux box is Red Hat 6.0 running
IP Masq/ipchains for my home LAN acting as the internet gateway for my
Win95 PCs. Any help or point me in the right direction would be
appreciated.
Please email directly to me.
Thanks
------------------------------
From: "Kai Krakow" <[EMAIL PROTECTED]>
Subject: Re: pppd 1 hour delay
Date: Sat, 29 May 1999 19:54:18 +0200
Reply-To: "Kai Krakow" <[EMAIL PROTECTED]>
> If I try to connect my isp, and find it 5 times busy, I can't do any
> other attempt to connect for 1 hour.
> Is it possible to set delay to a lower time, i.e. 5 minutes? How?
If you use diald to login (must usually be configured first - so if you
didn't you probably don't use diald) there's a lock option... After five
failed dial ins the daemon blocks further attempts.
Try to figure out if you run diald and then take a look at the manual page.
diald usually is configured for a command pipe (a file in /var/run) which
you can issue unlock commands to. On the other hand it can be configured to
not lock on failed dial ins...
ciao
Kai
------------------------------
From: james marshall <[EMAIL PROTECTED]>
Crossposted-To: alt.os.linux.slackware
Subject: Re: Problem Getting Mail ... Please Help !
Date: Sat, 29 May 1999 11:09:22 -0500
Reply-To: [EMAIL PROTECTED]
Desmond Coughlan <[EMAIL PROTECTED]> wrote:
: >Hi all,
: >I still can't get my e-mail. This morning, I ran fetchmail -v as
: >normal, and saw five messages arriving as normal. I then went into
: >Emacs, and activated RMAIL. No new messages. I telnetted to port 110
: >of my ISP's mailserver, and saw that the messages were gone.
: >The question is: where have these messages gone? Why have they not
: >been delivered to my mailbox? Can I get them back?
: >OK, so that's three questions, but you get the idea ...
: >I'd appreciate your help, as I feel lost without my e-mail ...
: >Thanks.
Try typing "mail" at the console prompt. Fetchmail just brings
your mail to the local spool (like /var/spool/mail/desmond).
If you get a list of messages when you type "mail", then the
problem is with your emacs set-up. I don't use emacs, but does
Rmail stand for "remote mail"? If you are using fetchmail to
retrieve from your ISP, then your mail should be on your machine
in the spool when it's done, in which case you need emacs' to look
for local mail.
--
Just squeeze your rage into a bitter little ball and
release it at an appropriate time. Like that day I
hit that referee with a whiskey bottle. 'Member that?
-- Homer Simpson
------------------------------
From: [EMAIL PROTECTED] (Georg Schwarz)
Crossposted-To: comp.os.linux.hardware
Subject: NFS block size for 3C523 NIC?
Date: 29 May 1999 17:45:47 GMT
Which NFS block size (rsize, wsize) should I use for an MCA 3COM 3C523
ethernet card? With 8192 I'm getting lots of timeout errors. Maybe this is
why the driver is labeled experimental? I'm using Linux 2.2.9.
--
Georg Schwarz ([EMAIL PROTECTED], [EMAIL PROTECTED], PGP 2.6ui)
Institut f�r Theoretische Physik +49 30 314-24254 FAX -21130 IRC kuroi
Technische Universit�t Berlin http://home.pages.de/~schwarz/
------------------------------
From: "jimlynn" <[EMAIL PROTECTED]>
Crossposted-To:
alt.os.linux,comp.os.linux.admin,comp.os.linux.help,comp.os.linux.misc,comp.os.linux.questions
Subject: Help with Masquerading.
Date: Sat, 29 May 1999 14:09:23 -0400
Hi,
I have a linux box setup to run IP Masquerading for my home network. I
find that some applications no longer work with this in place. Does anyone
know how to make certain applications like live updates for software (e.g.
Norton's live-update feature) work correctly? Any help is greatly
appreciated.
Thanks,
Brian
------------------------------
From: [EMAIL PROTECTED] (R. Denoire)
Subject: Re: Linux in NT Network
Date: Sat, 29 May 1999 18:09:30 GMT
Reply-To: [EMAIL PROTECTED]
"Cameron Spitzer" <[EMAIL PROTECTED]> wrote:
>
>I have not figured out how to find out what "shares" are available.
smbclient -L \*
================
------------------------------
** FOR YOUR REFERENCE **
The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:
Internet: [EMAIL PROTECTED]
You can send mail to the entire list (and comp.os.linux.networking) via:
Internet: [EMAIL PROTECTED]
Linux may be obtained via one of these FTP sites:
ftp.funet.fi pub/Linux
tsx-11.mit.edu pub/linux
sunsite.unc.edu pub/Linux
End of Linux-Networking Digest
******************************
